OPS235 Assignment 2 Tips

Turning Firewall On/Off on CentOS 7

To turn it off

• /usr/sbin/iptables -F
• /usr/sbin/iptables -P INPUT ACCEPT
• /usr/sbin/iptables -P OUTPUT ACCEPT

To turn it on

• systemctl restart firewalld.service

Turning SELinux On/Off on CentOS 7

To turn off SELinux temporary into permissive mode

• setenforce 0

To turn SELinx back on from permissive mode

• setenforce 1

To check the current status of SELinux

• sestatus

SELinux status:                 enabled
SELinuxfs mount:                /sys/fs/selinux
SELinux root directory:         /etc/selinux
Loaded policy name:             targeted
Current mode:                   enforcing
Mode from config file:          enforcing
Policy MLS status:              enabled
Policy deny_unknown status:     allowed
Max kernel policy version:      28

• setenforce 0
• sestatus

SELinux status:                 enabled
SELinuxfs mount:                /sys/fs/selinux
SELinux root directory:         /etc/selinux
Loaded policy name:             targeted
Current mode:                   permissive
Mode from config file:          enforcing
Policy MLS status:              enabled
Policy deny_unknown status:     allowed
Max kernel policy version:      28