[B! SELinux] roogh5eeSha6ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

roogh5eeSha6 id:roogh5eeSha6

SELinuxã«é–¢ã™ã‚‹roogh5eeSha6ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (4)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Ansibleã§ã®SELinuxã®ç„¡åŠ¹åŒ–ã¨ãƒªãƒ–ãƒ¼ãƒˆ - Jaybanuan's Blog
ã¯ã˜ã‚ã« è©¦ã—ãŸç’°å¢ƒ Playbookã‚’å®Ÿè¡Œã™ã‚‹å´ Playbookã‚’å®Ÿè¡Œã•ã‚Œã‚‹å´ Playbook Playbookã®è§£èª¬ (1) SELinuxç”¨ã®Pythonãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ« (2) SELinuxã®ç„¡åŠ¹åŒ– (3) SSHã®ãƒãƒ¼ãƒˆç•ªå·ã®å–å¾— (4) ãƒžã‚·ãƒ³ã®ãƒªãƒ–ãƒ¼ãƒˆ (5) ãƒžã‚·ãƒ³ã®åœæ¢ã‚’å¾…ã¡åˆã‚ã› (6) ãƒžã‚·ãƒ³ã®èµ·å‹•ã‚’å¾…ã¡åˆã‚ã› å®Ÿè¡Œçµæžœ - SELinuxãŒæœ‰åŠ¹ã®å ´åˆ å®Ÿè¡Œçµæžœ - SELinuxãŒç„¡åŠ¹ã®å ´åˆ ãã®ä»– ã¯ã˜ã‚ã« CentOS7ã§SELinuxã‚’ç„¡åŠ¹åŒ–ã™ã‚‹Playbookã‚’æ›¸ãã®ãŒä¸€è‹¦åŠ´ã ã£ãŸã®ã§ã€è©¦è¡ŒéŒ¯èª¤ã®çµæžœã‚’è¨˜éŒ²ã—ã¦ãŠãã€‚ è©¦ã—ãŸç’°å¢ƒ Playbookã‚’å®Ÿè¡Œã™ã‚‹å´ CentOS 7.4ã‚’yum updateã§æœ€æ–°åŒ–ã—ã¦ã€ansibleã‚’ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ãŸç’°å¢ƒã€‚ $ uname -srvm Linux 3.10.0-693.21.1.el7.x86_64
roogh5eeSha6 2020/07/28
Ansible

SELinux
ãƒªãƒ³ã‚¯
CentOS7 SELinuxã®ç„¡åŠ¹åŒ–æ‰‹é † - Qiita
cp -piv /etc/selinux/config /etc/selinux/config.`date "+%Y%m%d"` <å‡ºåŠ›çµæžœ> â€˜/etc/selinux/configâ€™ -> â€˜/etc/selinux/config.YYYYMMDDâ€™ # This file controls the state of SELinux on the system. # SELINUX= can take one of these three values: # enforcing - SELinux security policy is enforced. # permissive - SELinux prints warnings instead of enforcing. # disabled - No SELinux policy is loaded. ### Disalbe SE
roogh5eeSha6 2020/06/22
CentOS7

SELinux
ãƒªãƒ³ã‚¯
nginx : Permission denied ã‚’è§£æ±º â€“ ã‚¨ãƒ©ãƒ¼ã®å‘ã“ã†ã¸
CentOS 7ã«nginxã‚’ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ã¦HTTPã§ã‚µãƒ¼ãƒã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã¨502 Bad Gatewayã«ãªã£ãŸã€‚ ãƒã‚°ã‚’è¦‹ã‚‹ã¨13: Permission deniedãŒå‡ºã¦ã„ã‚‹ã€‚ 2017/03/08 11:54:32 [crit] 7149#0: *6 connect() to 127.0.0.1:8001 failed (13: Permission denied) while connecting to upstream, client: 127.0.0.1, server: localhost, request: â€œGET / HTTP/1.1â€, upstream: â€œhttp://127.0.0.1:8001/â€, host: â€œlocalhost:8080â€ Permission deniedã¨ã„ã†ã“ã¨ãªã®ã§ã€SELinuxã®ãƒã‚°ã‚’ãƒã‚§ãƒƒã‚¯ã™ã‚‹ã€‚ sudo fgrep
roogh5eeSha6 2020/04/18
Nginx

Permission denied

SELinux
ãƒªãƒ³ã‚¯
SELinuxã®ç„¡åŠ¹åŒ– - Qiita
æ¦‚è¦ 1.SELinuxã‚’ä¸€æ™‚çš„ã«ã‚ªãƒ•ã«ã™ã‚‹æ–¹æ³• 2.SELinuxã‚’æ°¸ç¶šçš„ã«ã‚ªãƒ•ã«ã™ã‚‹æ–¹æ³• ç’°å¢ƒ CentOS7 ç¾åœ¨ã®çŠ¶æ…‹ç¢ºèªæ–¹æ³• çŠ¶æ…‹ä¸€è¦§ ãƒ»enforcing ï½¥ï½¥ï½¥ SELinuxã¯æœ‰åŠ¹ã§ã€ã‚¢ã‚¯ã‚»ã‚¹åˆ¶é™ã‚‚æœ‰åŠ¹ã€‚ ãƒ»permissive ï½¥ï½¥ï½¥ SELinuxã¯æœ‰åŠ¹ã ãŒã€ã‚¢ã‚¯ã‚»ã‚¹åˆ¶é™ã¯è¡Œã‚ãšè¦å‘Šã‚’å‡ºåŠ›ã€‚ ãƒ»disabled ï½¥ï½¥ï½¥ SELinuxæ©Ÿèƒ½ã¯ç„¡åŠ¹ã€‚ å®Ÿè¡Œãƒã‚°
roogh5eeSha6 2020/04/18
SELinux

ç„¡åŠ¹åŒ–
ãƒªãƒ³ã‚¯
1