{"id":2415,"date":"2011-10-24T14:47:47","date_gmt":"2011-10-24T14:47:47","guid":{"rendered":"http:\/\/megahost.ro\/blog\/?p=2415"},"modified":"2018-09-06T08:01:13","modified_gmt":"2018-09-06T08:01:13","slug":"server-dedicat-linux-cum-sa-opresti-selinux","status":"publish","type":"post","link":"https:\/\/megahost.ro\/blog\/server-dedicat-linux-cum-sa-opresti-selinux.html","title":{"rendered":"Server dedicat Linux: cum sa opresti SELinux"},"content":{"rendered":"

Pe unele distributii de Linux, SELinux este activat in mod implicit. In cazul in care nu intelegeti exact cum functioneaza SELinux, daca acesta este activat, pot aparea diferite probleme. In acest caz, pana cand intelegeti exact cum trebuie configurat si cum functioneaza SELinux, este mai bine sa-l dezactivati. De exemplu, nu veti putea instala cPanel pe un server dedicat<\/a> daca SELinux este activat.<\/p>\n

Exista mai multe metode prin care puteti dezactiva SELinux:<\/p>\n

Pentru a dezactiva temporar SELinux trebuie sa modificati fisierul \/selinux\/enforce:<\/p>\n

#<\/strong> cat \/selinux\/enforce
\n1
\n#<\/strong> echo 0 > \/selinux\/enforce<\/p>\n

#<\/strong> cat \/selinux\/enforce
\n0<\/p>\n

Puteti utiliza si comanda setenforce pentru a dezactiva SELinux. Comanda suporta 3 parametri: Enforcing, Permissive, 1 (activat) sau 0 (dezactivat)<\/p>\n

#<\/strong> setenforce 0<\/p>\n

Pentru a dezactiva definitiv SELinux, trebuie modificat fisierul \/etc\/selinux\/config si trebuie setat SELINUX=disabled in acest fisier<\/p>\n

#<\/strong> cat \/etc\/selinux\/config
\nSELINUX=disabled
\nSELINUXTYPE=targeted
\nSETLOCALDEFS=0<\/p>\n

In acest fisier se pot seta urmatorii parametri:
\nenforcing<\/strong> – Politica de executare este intotdeauna Enforced
\npermissive<\/strong> – Se simuleaza politica de executare prin afisarea de mesaje, insa nu se executa efectiv SELinux
\ndisabled<\/strong> – Se dezactiveaza complet SELinux<\/p>\n

Daca fisierul \/etc\/selinux\/config nu exista pe serverul dedicat, SELinux poate fi dezactivat utilizand un parametru in meniul de bootare al boot loaderului GRUB.<\/p>\n

#<\/strong> cat \/boot\/grub\/grub.conf
\ndefault=0
\ntimeout=5
\nsplashimage=(hd0,0)\/boot\/grub\/splash.xpm.gz
\nhiddenmenu
\ntitle Enterprise Linux Enterprise Linux Server (2.6.18-92.el5PAE)
\nroot (hd0,0)
\nkernel \/boot\/vmlinuz-2.6.18-92.el5PAE ro root=LABEL=\/ rhgb quiet selinux=0
\ninitrd \/boot\/initrd-2.6.18-92.el5PAE.img
\ntitle Enterprise Linux Enterprise Linux Server (2.6.18-92.el5)
\nroot (hd0,0)
\nkernel \/boot\/vmlinuz-2.6.18-92.el5 ro root=LABEL=\/ rhgb quiet selinux=0<\/p>\n

Daca nu doriti dezactivarea SELinux la nivel global pe server, il puteti totusi dezactiva doar pentru un anumit serviciu care ruleaza pe server, de exemplu, pentru serverul web apache.<\/p>\n

Se modifica fisierul \/etc\/selinux\/targeted\/booleans conform instructiunilor de mai jos:<\/p>\n

#<\/strong> grep httpd \/etc\/selinux\/targeted\/booleans
\nhttpd_builtin_scripting=1
\nhttpd_disable_trans=1
\nhttpd_enable_cgi=1
\nhttpd_enable_homedirs=1
\nhttpd_ssi_exec=1
\nhttpd_tty_comm=0
\nhttpd_unified=1<\/p>\n

Se foloseste comanda setsebool:<\/p>\n

#<\/strong> setsebool httpd_disable_trans 1<\/p>\n

Pentru ca aceste modificari sa devina operationale, este necesar sa restarati serviciul apache (httpd):<\/p>\n

#<\/strong> service httpd restart<\/p>\n","protected":false},"excerpt":{"rendered":"

Pe unele distributii de Linux, SELinux este activat in mod implicit. In cazul in care nu intelegeti exact cum functioneaza SELinux, daca acesta este activat, pot aparea diferite probleme. <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[184],"tags":[57,10,690],"class_list":["post-2415","post","type-post","status-publish","format-standard","hentry","category-server-dedicat","tag-cpanel","tag-linux","tag-server-dedicat"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"Server dedicat Linux: cum sa opresti SELinux | megahost.ro","description":"Pe unele distributii de Linux, SELinux este activat in mod implicit. In cazul in care nu intelegeti exact cum functioneaza SELinux, daca acesta este activat, pot aparea diferite probleme.","canonical_url":"https:\/\/megahost.ro\/blog\/server-dedicat-linux-cum-sa-opresti-selinux.html","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null},"aioseo_meta_data":{"post_id":"2415","title":"Server dedicat Linux: cum sa opresti SELinux | megahost.ro","description":"Pe unele distributii de Linux, SELinux este activat in mod implicit. In cazul in care nu intelegeti exact cum functioneaza SELinux, daca acesta este activat, pot aparea diferite probleme.","keywords":[{"label":"server dedicat","value":"server dedicat"},{"label":"linux","value":"linux"},{"label":"cpanel","value":"cpanel"}],"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"location":null,"local_seo":null,"breadcrumb_settings":null,"limit_modified_date":false,"ai":null,"created":"2020-12-20 22:33:15","updated":"2025-06-04 01:16:45","seo_analyzer_scan_date":null,"focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"aioseo_breadcrumb":"

\n\t\t\tHome<\/a>\n\t\t<\/span>\u00bb<\/span>\n\t\t\tServer Dedicat<\/a>\n\t\t<\/span>\u00bb<\/span>\n\t\t\tServer dedicat Linux: cum sa opresti SELinux\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/megahost.ro\/blog\/"},{"label":"Server Dedicat","link":"https:\/\/megahost.ro\/blog\/category\/server-dedicat"},{"label":"Server dedicat Linux: cum sa opresti SELinux","link":"https:\/\/megahost.ro\/blog\/server-dedicat-linux-cum-sa-opresti-selinux.html"}],"_links":{"self":[{"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/posts\/2415","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/comments?post=2415"}],"version-history":[{"count":0,"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/posts\/2415\/revisions"}],"wp:attachment":[{"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/media?parent=2415"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/categories?post=2415"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/tags?post=2415"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}