Интерактивная система просмотра системных руководств (man-ов)
kerberos_selinux (8)
kerberos_selinux (8) ( Русские man: Команды системного администрирования )
>> kerberos_selinux (8) ( Linux man: Команды системного администрирования )
NAME
kerberos_selinux - Security Enhanced Linux Policy for Kerberos.
DESCRIPTION
Security-Enhanced Linux secures the system via flexible mandatory access
control. By default Kerberos access is not allowed, since it requires daemons to be allowed greater access to certain secure files and addtional access to the network.
BOOLEANS
You must set the allow_kerberos boolean to allow your system to work properly in a Kerberos environment.
setsebool -P allow_kerberos 1
If you are running Kerberos daemons kadmind or krb5kdc you can disable the SELinux protection on these daemons by setting the krb5kdc_disable_trans and kadmind_disable_trans booleans.
setsebool -P krb5kdc_disable_trans 1
service krb5kdc restart
setsebool -P kadmind_disable_trans 1
service kadmind restart
system-config-securitylevel is a GUI tool available to customize SELinux policy settings.
