{"id":4893,"date":"2021-03-03T12:32:27","date_gmt":"2021-03-03T04:32:27","guid":{"rendered":"https:\/\/www.gbase8.cn\/?p=4893"},"modified":"2021-03-03T12:32:27","modified_gmt":"2021-03-03T04:32:27","slug":"gbase-8a%e5%af%b9selinux%e7%9a%84%e9%85%8d%e7%bd%ae%e8%a6%81%e6%b1%82","status":"publish","type":"post","link":"https:\/\/www.gbase8.cn\/en\/4893","title":{"rendered":"\u5357\u5927\u901a\u7528GBase 8a\u5bf9selinux\u7684\u914d\u7f6e\u8981\u6c42"},"content":{"rendered":"<p>\u5728GBase 8a V8\u7cfb\u5217\u91cc\uff0c\u8981\u6c42\u64cd\u4f5c\u7cfb\u7edfselinux\u5fc5\u987b\u5904\u4e8e\u5173\u95ed\u72b6\u6001\uff0c\u800c\u5728V9\u7cfb\u5217\uff0c\u53ef\u4ee5\u5904\u4e8e\u6b63\u5e38\u6253\u5f00\u72b6\u6001\u3002<\/p>\n\n\n\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_84 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Directory Navigation<\/p>\n<label for=\"ez-toc-cssicon-toggle-item-6a2b21476f4cf\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewbox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewbox=\"0 0 24 24\" version=\"1.2\" baseprofile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\"  id=\"ez-toc-cssicon-toggle-item-6a2b21476f4cf\"  aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.gbase8.cn\/en\/4893\/#V8%E7%89%88%E6%9C%AC\" >V8\u7248\u672c<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.gbase8.cn\/en\/4893\/#V9%E7%89%88%E6%9C%AC\" >V9\u7248\u672c<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.gbase8.cn\/en\/4893\/#%E6%9C%8D%E5%8A%A1%E5%90%AF%E5%8A%A8%E6%AD%A3%E5%B8%B8\" >\u670d\u52a1\u542f\u52a8\u6b63\u5e38<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.gbase8.cn\/en\/4893\/#%E6%9F%A5%E8%AF%A2%E6%98%AF%E6%AD%A3%E5%B8%B8%E7%9A%84\" >\u67e5\u8be2\u662f\u6b63\u5e38\u7684<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.gbase8.cn\/en\/4893\/#%E6%80%BB%E7%BB%93\" >Summary<\/a><\/li><\/ul><\/nav><\/div>\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"V8%E7%89%88%E6%9C%AC\"><\/span>V8\u7248\u672c<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>\u9700\u8981\u4fee\u6539\/etc\/selinux\/config\uff0c\u5c06\u5176\u4e2dSELINUX=enforcing\u6539\u6210SELINUX=disabled\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>&#91;gbase@rh6-1 gcware]$ cat \/etc\/selinux\/config\r\n\r\n# This file controls the state of SELinux on the system.\r\n# SELINUX= can take one of these three values:\r\n#     enforcing - SELinux security policy is enforced.\r\n#     permissive - SELinux prints warnings instead of enforcing.\r\n#     disabled - No SELinux policy is loaded.\r\nSELINUX=disabled\r\n# SELINUXTYPE= can take one of these two values:\r\n#     targeted - Targeted processes are protected,\r\n#     mls - Multi Level Security protection.\r\nSELINUXTYPE=targeted\r\n<\/code><\/pre>\n\n\n\n<p>\u4e4b\u540e\u5efa\u8baereboot\u64cd\u4f5c\u7cfb\u7edf\uff0c\u5e76\u786e\u8ba4\u751f\u6548\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>&#91;gbase@rh6-1 gcware]$ getenforce\r\nDisabled\r\n&#91;gbase@rh6-1 gcware]$\r\n<\/code><\/pre>\n\n\n\n<p>\u5982\u679c\u4e0d\u60f3reboot\u7cfb\u7edf\uff0c\u53ef\u4ee5\u7528\u5982\u4e0b\u547d\u4ee4\u4e34\u65f6\u5173\u95ed<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>&#91;gbase@rh6-1 gcware]$ setenforce 0\r\nsetenforce: SELinux is disabled\r\n&#91;gbase@rh6-1 gcware]$ getenforce\r\n<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"V9%E7%89%88%E6%9C%AC\"><\/span>V9\u7248\u672c<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>\u4e0d\u5728\u9700\u8981\u5173\u95edselinux\u53c2\u6570\uff0c\u53ef\u4ee5\u6b63\u5e38\u8fd0\u884c\u3002\u4e3b\u8981\u662f\u5176\u53ea\u4f7f\u7528dbaUser(\u4e00\u822c\u662fgbase)\u7684\u8d44\u6e90\u3002<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"%E6%9C%8D%E5%8A%A1%E5%90%AF%E5%8A%A8%E6%AD%A3%E5%B8%B8\"><\/span>\u670d\u52a1\u542f\u52a8\u6b63\u5e38<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<pre class=\"wp-block-code\"><code>Last login: Wed Mar  3 12:24:48 CST 2021 on pts\/0\r\n&#91;gbase@gbase_rh7_001 ~]$ getenforce\r\nEnforcing\r\n&#91;gbase@gbase_rh7_001 ~]$ gcluster_services all start\r\nStarting gcware :                                          &#91;  OK  ]\r\nStarting gcluster :                                        &#91;  OK  ]\r\nStarting gcrecover :                                       &#91;  OK  ]\r\nStarting gbase :                                           &#91;  OK  ]\r\nStarting syncserver :                                      &#91;  OK  ]\r\nStarting GCMonit success!\r\n&#91;gbase@gbase_rh7_001 ~]$ ps -efZ|grep gbase\r\nsystem_u:system_r:avahi_t:s0    avahi      554     1  0 12:27 ?        00:00:00 avahi-daemon: running &#91;gbaserh7001.local]\r\nunconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 root 3296 3112  0 12:28 pts\/0 00:00:00 su - gbase\r\nunconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 gbase 3297 3296  0 12:28 pts\/0 00:00:00 -bash\r\nunconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 gbase 3555 1 12 12:28 ? 00:00:04 \/opt\/gbase\/gcware\/sbin\/gcware\r\nunconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 gbase 3586 1 12 12:28 pts\/0 00:00:04 \/opt\/gbase\/gcluster\/server\/bin\/gclusterd\r\nunconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 gbase 3636 1 11 12:28 pts\/0 00:00:03 \/opt\/gbase\/gcluster\/server\/bin\/gcrecover\r\nunconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 gbase 3684 1  4 12:28 pts\/0 00:00:01 \/opt\/gbase\/gnode\/server\/bin\/gbased\r\nunconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 gbase 4240 1  0 12:28 pts\/0 00:00:00 \/opt\/gbase\/gnode\/server\/bin\/gc_sync_server\r\nunconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 gbase 4292 1  1 12:28 pts\/0 00:00:00 \/opt\/gbase\/gcluster\/server\/bin\/gcmonit --start\r\nunconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 gbase 4294 1  0 12:28 pts\/0 00:00:00 \/opt\/gbase\/gcluster\/server\/bin\/gcmmonit --start\r\nunconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 gbase 5230 3297  0 12:29 pts\/0 00:00:00 ps -efZ\r\nunconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 gbase 5231 3297  0 12:29 pts\/0 00:00:00 grep --color=auto gbase\r\n&#91;gbase@gbase_rh7_001 ~]$\r\n<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"%E6%9F%A5%E8%AF%A2%E6%98%AF%E6%AD%A3%E5%B8%B8%E7%9A%84\"><\/span>\u67e5\u8be2\u662f\u6b63\u5e38\u7684<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<pre class=\"wp-block-code\"><code>&#91;gbase@gbase_rh7_001 ~]$ gccli\r\n\r\nGBase client 9.5.2.36.125743. Copyright (c) 2004-2021, GBase.  All Rights Reserved.\r\n\r\ngbase> select count(*) from vc01.testdb.t1;\r\n+----------+\r\n| count(*) |\r\n+----------+\r\n|        2 |\r\n+----------+\r\n1 row in set (Elapsed: 00:00:00.11)\r\n<\/code><\/pre>\n\n\n\n<p><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"%E6%80%BB%E7%BB%93\"><\/span>Summary<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>\u5904\u4e8e\u5b89\u5168\u52a0\u56fa\u8981\u6c42\uff0c\u5fc5\u987b\u5f00\u542fselinux\u7684\uff0c\u8bf7\u4f7f\u7528V9\u7248\u672c\uff0c\u5e76\u81ea\u884c\u5bf9gbase\u7684\u51e0\u4e2a\u8fdb\u7a0b\u505a\u5b89\u5168\u7b56\u7565\u914d\u7f6e\u3002\u9ed8\u8ba4\u53ea\u4f7f\u7528dbaUser\uff08\u4e00\u822c\u662fgbase\uff09\u7684\u4e3b\u76ee\u5f55\u548c\u6570\u636e\u5e93\u5b89\u88c5\u76ee\u5f55\u4e0b\u7684\u8d44\u6e90\u3002\u53e6\u5916\/dev\/shm\u7528\u4e8e\u5171\u4eab\u5185\u5b58\u4ea4\u6362\uff0c \/tmp\u7528\u4e8e\u4e34\u65f6\u6587\u4ef6(\u53ef\u914d\u7f6e)\u3002<\/p>","protected":false},"excerpt":{"rendered":"<p>\u5728GBase 8a V8\u7cfb\u5217\u91cc\uff0c\u8981\u6c42\u64cd\u4f5c\u7cfb\u7edfselinux\u5fc5\u987b\u5904\u4e8e\u5173\u95ed\u72b6\u6001\uff0c\u800c\u5728V9\u7cfb\u5217\uff0c\u53ef\u4ee5\u5904\u4e8e\u6b63\u5e38\u6253\u5f00\u72b6\u6001\u3002<\/p>","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"class_list":["post-4893","post","type-post","status-publish","format-standard","hentry","category-gbase8a"],"_links":{"self":[{"href":"https:\/\/www.gbase8.cn\/en\/wp-json\/wp\/v2\/posts\/4893","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.gbase8.cn\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.gbase8.cn\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.gbase8.cn\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.gbase8.cn\/en\/wp-json\/wp\/v2\/comments?post=4893"}],"version-history":[{"count":5,"href":"https:\/\/www.gbase8.cn\/en\/wp-json\/wp\/v2\/posts\/4893\/revisions"}],"predecessor-version":[{"id":4898,"href":"https:\/\/www.gbase8.cn\/en\/wp-json\/wp\/v2\/posts\/4893\/revisions\/4898"}],"wp:attachment":[{"href":"https:\/\/www.gbase8.cn\/en\/wp-json\/wp\/v2\/media?parent=4893"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.gbase8.cn\/en\/wp-json\/wp\/v2\/categories?post=4893"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.gbase8.cn\/en\/wp-json\/wp\/v2\/tags?post=4893"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}