\u25a0 SELinux \uc0c1\ud0dc \ud655\uc778
\n\u25cb SELinux \ud604\uc7ac \uc0c1\ud0dc \ud655\uc778 : sestatus\u00a0 -v
\n\u25cb \ubaa8\ub4e0 SELinux boolean \uac12 \ud655\uc778 : getsebool\u00a0 -a
\n\u25cb \ud30c\uc77c\/\ub514\ub809\ud1a0\ub9ac \ucee8\ud14d\uc2a4\ud2b8 \ud655\uc778 : ls -Z
\n\u25cb \uba54\ubaa8\ub9ac \ud504\ub85c\uc138\uc2a4 \ucee8\ud14d\uc2a4\ud2b8 \ud655\uc778 : ps -Z
\n\u00a0
\n\u00a0
\n\u25a0 \ub85c\uadf8\ud30c\uc77c
\n\u25cb \uae30\ubcf8\uc801\uc73c\ub85c \uad8c\ud55c\uc774 \uac70\ubd80\ub418\uc5c8\uc744 \ub54c\ub9cc \uae30\ub85d\ub418\ub3c4\ub85d \uc124\uc815\ub418\uc5b4 \uc788\ub2e4.
\n\u25cb auditd \uc11c\ube44\uc2a4 \ub370\ubaac\uc774 \uc791\ub3d9 \uc911\uc77c \uacbd\uc6b0 \ub85c\uadf8 \uacbd\ub85c : \/var\/log\/audit\/audit.log
\n\u25cb auditd\uac00 \uc791\ub3d9 \uc548\ud560 \uacbd\uc6b0 \ub85c\uadf8 \uacbd\ub85c : \/var\/log\/messages
\n\u00a0
\n\u00a0
\n\u25a0 SELinux \uc911\uc9c0\/\uc791\ub3d9
\n\u25cb \uc77c\uc2dc\uc801\uc784.\u00a0 \uc7ac\ubd80\ud305\ud558\uba74 \uc124\uc815\ud30c\uc77c\ub300\ub85c \ub2e4\uc2dc \ub418\ub3cc\uc544\uc634.
\n\u25cb \uc911\uc9c0 : setenforce\u00a0 0
\n\u25cb \uc791\ub3d9 : setenforce\u00a0 1
\n\u00a0
\n\u00a0\u00a0
\n– \ucee8\ud14d\uc2a4\ud2b8 \uc124\uc815 \ubcf5\uc6d0 : \/sbin\/restorecon\u00a0 -R\u00a0 -v\u00a0 \/opt\/cubrid\/lib\/libcubridcs.so
\n– \ucee8\ud14d\uc2a4\ud2b8 \ud0c0\uc785 \ubcc0\uacbd : \/usr\/bin\/chcon\u00a0 -t\u00a0 texrel_shlib_t\u00a0 \/opt\/cubrid\/lib\/libcubridcs.so\u200b
\n\u00a0
\n\u00a0
\n\u00a0
\n\u00a0
\n\u25cb SELinux \uc124\uc815 : \uc6f9\uc11c\ubc84\uac00 \uc0ac\uc6a9\uc790\ubcc4 \uc6f9 \ub514\ub809\ud1a0\ub9ac\uc5d0 \uc811\uadfc\ud560 \uc218 \uc788\ub3c4\ub85d \uad8c\ud55c\uc744 \uc124\uc815\ud55c\ub2e4.
\n\u00a0\u00a0\u00a0 – \uc0c1\ud0dc\ud655\uc778 : getsebool\u00a0 httpd_enable_homedirs
\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 — \ud655\uc778\uacb0\uacfc : httpd_enable_homedirs –> off
\n\u00a0\u00a0\u00a0 – \uc0c1\ud0dc\uc124\uc815 : setsebool -P httpd_enable_homedirs\u00a0 on
\n\u00a0-P : \uc124\uc815\uc744 \uc124\uc815\ud30c\uc77c\uc5d0 \uae30\ub85d\ud574\uc11c \uc7ac\ubd80\ud305\ub418\uc5b4\ub3c4 \uacc4\uc18d \uc720\uc9c0\ub418\ub3c4\ub85d \ud55c\ub2e4.
\n\u00a0
\n\u00a0
\n\u00a0
\n\u00a0
\n\u25cb SELinux \uc124\uc815 : \uc6f9\uc11c\ubc84\uac00 \uc0ac\uc6a9\uc790\uc758 \ucee8\ud150\uce20\uc5d0 \ub300\ud55c \uc811\uadfc\uc744 \ud560 \uc218 \uc788\ub3c4\ub85d \uc124\uc815\ud55c\ub2e4.
\n\u00a0\u00a0\u00a0 – \uc124\uc815 : chcon\u00a0 -R\u00a0 -t\u00a0 httpd_user_content_t\u00a0 \/home\/account\/public_html
\n\u00a0\u00a0\u00a0 – \ud655\uc778 : ls\u00a0 -aldZ\u00a0 \/home\/account\/public_html
\n\u00a0\u00a0\u00a0 \u203b httpd\uac00 httpd_t type\uc73c\ub85c \uc2e4\ud589\ub418\uba70 httpd_user_content_t, httpd_sys_content_t type\uc73c\ub85c \uc124\uc815\ub41c \ud30c\uc77c\ub9cc \uc811\uadfc\ud560 \uc218 \uc788\ub2e4.
\n\u00a0-R : \ub514\ub809\ud1a0\ub9ac \ud558\uc704 \uac1d\uccb4\uc5d0\ub3c4 \ub3d9\uc77c\ud558\uac8c \uc801\uc6a9\ud55c\ub2e4.
\n\u00a0-t : context type\uc744 \uc124\uc815\ud55c\ub2e4.
\n\u00a0
\n\u00a0
\n\u00a0
\nsetsebool -P httpd_read_user_content 1<\/p>\n","protected":false},"excerpt":{"rendered":"
\u25a0 SELinux \uc0c1\ud0dc \ud655\uc778 \u25cb SELinux \ud604\uc7ac \uc0c1\ud0dc \ud655\uc778 : sestatus\u00a0 -v \u25cb \ubaa8\ub4e0 SELinux boolean \uac12 \ud655\uc778 : getsebool\u00a0 -a \u25cb \ud30c\uc77c\/\ub514\ub809\ud1a0\ub9ac \ucee8\ud14d\uc2a4\ud2b8 \ud655\uc778 : ls -Z \u25cb \uba54\ubaa8\ub9ac \ud504\ub85c\uc138\uc2a4 \ucee8\ud14d\uc2a4\ud2b8 \ud655\uc778 : ps -Z \u00a0 \u00a0 \u25a0 \ub85c\uadf8\ud30c\uc77c \u25cb \uae30\ubcf8\uc801\uc73c\ub85c \uad8c\ud55c\uc774 \uac70\ubd80\ub418\uc5c8\uc744 \ub54c\ub9cc \uae30\ub85d\ub418\ub3c4\ub85d \uc124\uc815\ub418\uc5b4 \uc788\ub2e4. \u25cb auditd \uc11c\ube44\uc2a4 \ub370\ubaac\uc774 \uc791\ub3d9 \uc911\uc77c \uacbd\uc6b0 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-15","post","type-post","status-publish","format-standard","hentry","category-about-linux"],"_links":{"self":[{"href":"https:\/\/www.onepage.co.kr\/wordpress\/index.php\/wp-json\/wp\/v2\/posts\/15","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.onepage.co.kr\/wordpress\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.onepage.co.kr\/wordpress\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.onepage.co.kr\/wordpress\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.onepage.co.kr\/wordpress\/index.php\/wp-json\/wp\/v2\/comments?post=15"}],"version-history":[{"count":1,"href":"https:\/\/www.onepage.co.kr\/wordpress\/index.php\/wp-json\/wp\/v2\/posts\/15\/revisions"}],"predecessor-version":[{"id":16,"href":"https:\/\/www.onepage.co.kr\/wordpress\/index.php\/wp-json\/wp\/v2\/posts\/15\/revisions\/16"}],"wp:attachment":[{"href":"https:\/\/www.onepage.co.kr\/wordpress\/index.php\/wp-json\/wp\/v2\/media?parent=15"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.onepage.co.kr\/wordpress\/index.php\/wp-json\/wp\/v2\/categories?post=15"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.onepage.co.kr\/wordpress\/index.php\/wp-json\/wp\/v2\/tags?post=15"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}