> ## Content Index
> Fetch the complete content index at: https://note.xdq.me/llms.txt
> Use this file to discover other available public pages before exploring further.

# selinux 常用命令
- URL: https://note.xdq.me/selinux-chang-yong-ming-ling/
- Published: 2018-06-07T05:06:56.000Z
- Updated: 2026-10-03T02:59:34.000Z
- Author: xud6
- Tags: linux, centos, centos7, selinux, #Import 2026-10-03 02:45

## 查看是否有被selinux阻挡

```
sudo cat /var/log/audit/audit.log | grep denied

```

## boolean

### 查看boolean状态

```
sudo sestatus -b

sudo sestatus -b | grep -i sendmail

```

### 设置boolean

```
sudo setsebool -P $boolean名 $1或0

```

### 常用boolean

| boolean名                     | 意义          |
| ---------------------------- | ----------- |
| httpd\_can\_network\_connect | 允许httpd反向代理 |
| httpd\_can\_sendmail         | 允许httpd发送邮件 |

## semanager

### 安装semanager

```
sudo yum install -y policycoreutils-python

```

Centos 8

```
sudo yum install -y policycoreutils-python-utils

```

### 获取系统中的可用label

```
sudo semanage fcontext -l |grep {SOMETHING}

```

### 给文件设置label

```
sudo semanage fcontext -a -t httpd_sys_content_t /path/to/file
restorecon -v /path/to/file

```

### 给文件夹设置label

```
sudo semanage fcontext -a -t httpd_sys_content_t "/path/to/dir(/.*)?"
restorecon -R -v /path/to/dir

```