{"id":44733,"date":"2022-01-20T06:55:00","date_gmt":"2022-01-19T23:55:00","guid":{"rendered":"https:\/\/wiki.tino.org\/staging\/?p=44733"},"modified":"2023-08-22T08:51:30","modified_gmt":"2023-08-22T01:51:30","slug":"selinux-la-gi","status":"publish","type":"post","link":"https:\/\/tino.vn\/blog\/selinux-la-gi\/","title":{"rendered":"SELinux l\u00e0 g\u00ec? C\u00e1ch v\u00f4 hi\u1ec7u h\u00f3a SELinux trong Linux, Ubuntu, Debian"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong><strong>Trong qu\u00e1 tr\u00ecnh s\u1eed d\u1ee5ng <a href=\"https:\/\/tino.vn\/blog\/he-dieu-hanh-linux-la-gi\/\" target=\"_blank\" rel=\"noreferrer noopener\">Linux<\/a>, khi b\u1ea1n c\u00e0i \u0111\u1eb7t m\u1ed9t ph\u1ea7n m\u1ec1m n\u00e0o \u0111\u00f3, ch\u00fang s\u1ebd y\u00eau c\u1ea7u b\u1ea1n v\u00f4 hi\u1ec7u h\u00f3a SELinux. V\u1eady, SELinux l\u00e0 g\u00ec? T\u1eaft SELinux c\u00f3 an to\u00e0n hay kh\u00f4ng? C\u00e1ch t\u1eaft SELinux nh\u01b0 th\u1ebf n\u00e0o? C\u00e1ch s\u1eed d\u1ee5ng SELinux ra sao? T\u1ea5t c\u1ea3 c\u00e2u h\u1ecfi s\u1ebd \u0111\u01b0\u1ee3c Tino Group gi\u1ea3i \u0111\u00e1p trong b\u00e0i vi\u1ebft n\u00e0y.<\/strong><\/strong><\/p>\n\n\n\n<h2 id=\"T\u00ecm_hi\u1ec3u_v\u1ec1_SELinux\"><a id=\"post-44733-_lhzttnsm7xxn\"><\/a><strong>T\u00ecm hi\u1ec3u v\u1ec1 SELinux<\/strong><\/h2>\n\n\n\n<h3 id=\"SELinux_l\u00e0_g\u00ec?\"><a id=\"post-44733-_pgxryhht8viy\"><\/a><strong>SELinux l\u00e0 g\u00ec?<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>SELinux <\/strong>l\u00e0 vi\u1ebft t\u1eaft c\u1ee7a <strong>S<\/strong>ecurity <strong>E<\/strong>nhanced <strong>Linux<\/strong>, m\u1ed9t module b\u1ea3o m\u1eadt Linux kernel c\u1ee7a h\u1ec7 \u0111i\u1ec1u h\u00e0nh Linux nh\u1eb1m gia t\u0103ng kh\u1ea3 n\u0103ng b\u1ea3o m\u1eadt cho h\u1ec7 th\u1ed1ng \u0111\u01b0\u1ee3c t\u00edch h\u1ee3p s\u1eb5n trong h\u1ec7 th\u1ed1ng (ch\u1ec9 c\u00f3<a href=\"https:\/\/www.redhat.com\/en\/technologies\/linux-platforms\/enterprise-linux\" data-type=\"URL\" data-id=\"https:\/\/www.redhat.com\/en\/technologies\/linux-platforms\/enterprise-linux\" rel=\"nofollow noopener\" target=\"_blank\"> RedHat Enterprise Linux<\/a> (RHEL) v\u00e0 <a href=\"https:\/\/tino.vn\/blog\/ubuntu-va-centos-he-dieu-hanh-nao-tot-hon\/\" data-type=\"post\" data-id=\"15702\" target=\"_blank\" rel=\"noreferrer noopener\">CentOS <\/a>l\u00e0 t\u00edch h\u1ee3p s\u1eb5n, b\u1eadt s\u1eb5n gi\u00fap ng\u01b0\u1eddi d\u00f9ng). Module n\u00e0y d\u00f9ng \u0111\u1ec3 th\u1ef1c thi c\u00e1c ch\u00ednh s\u00e1ch t\u00e0i nguy\u00ean x\u00e1c \u0111\u1ecbnh m\u1ee9c \u0111\u1ed9 truy c\u1eadp c\u1ee7a user, ch\u01b0\u01a1ng tr\u00ecnh v\u00e0 d\u1ecbch v\u1ee5 tr\u00ean h\u1ec7 th\u1ed1ng c\u1ee7a h\u1ec7 \u0111i\u1ec1u h\u00e0nh.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Trong ch\u1ebf \u0111\u1ed9 m\u1eb7c \u0111\u1ecbnh, SELinux s\u1ebd ng\u0103n ch\u1eb7n v\u00e0 ghi nh\u1eadt k\u00fd t\u1ea5t c\u1ea3 nh\u1eefng h\u00e0nh vi truy c\u1eadp tr\u00e1i ph\u00e9p v\u00e0o b\u1ea5t k\u1ef3 t\u00e0i nguy\u00ean n\u00e0o c\u1ee7a h\u1ec7 th\u1ed1ng. V\u1edbi ph\u01b0\u01a1ng ph\u00e1p b\u1ea3o m\u1eadt n\u00e0y, ng\u01b0\u1eddi qu\u1ea3n tr\u1ecb h\u1ec7 th\u1ed1ng ph\u1ea3i cung c\u1ea5p r\u00f5 r\u00e0ng c\u00e1c quy\u1ec1n truy c\u1eadp v\u00e0o: t\u1ec7p, th\u01b0 m\u1ee5c, <a href=\"https:\/\/tino.vn\/blog\/socket-la-gi\/\" data-type=\"post\" data-id=\"15742\">socket<\/a> v\u00e0 c\u00e1c d\u1ecbch v\u1ee5 kh\u00e1c cho user v\u00e0 c\u00e1c ch\u01b0\u01a1ng tr\u00ecnh.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter is-resized\"><img decoding=\"async\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2021\/12\/word-image-818.png\" alt=\"selinux-la-gi\" class=\"wp-image-44766\" width=\"640\" height=\"360\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2021\/12\/word-image-818.png 1280w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2021\/12\/word-image-818-300x169.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2021\/12\/word-image-818-1024x576.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2021\/12\/word-image-818-768x432.png 768w\" sizes=\"(max-width: 640px) 100vw, 640px\" \/><\/figure>\n<\/div>\n\n\n<h3 id=\"SELinux_c\u00f3_nh\u1eefng_ch\u1ebf_\u0111\u1ed9_n\u00e0o?\"><a id=\"post-44733-_d9pp36yjqquy\"><\/a><strong>SELinux c\u00f3 nh\u1eefng ch\u1ebf \u0111\u1ed9 n\u00e0o?<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">SELinux ch\u1ea1y \u1edf 3 ch\u1ebf \u0111\u1ed9 kh\u00e1c nhau bao g\u1ed3m:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201c<strong>Enforcing<\/strong>&#8220;, &#8220;<strong>Permissive<\/strong>&#8221; v\u00e0 &#8220;<strong>Disabled<\/strong>&#8220;.<\/p>\n\n\n\n<h4 id=\"Enforcing_&#8211;_Thi_h\u00e0nh\"><a id=\"post-44733-_ewzbf5qrmqf0\"><\/a><strong>Enforcing &#8211; Thi h\u00e0nh<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Trong ch\u1ebf \u0111\u1ed9 <strong>Enforcing <\/strong>n\u00e0y, h\u1ec7 th\u1ed1ng s\u1ebd thi h\u00e0nh c\u00e1c ch\u00ednh s\u00e1ch b\u1ea3o m\u1eadt m\u1ed9t c\u00e1ch kh\u1eafc khe, c\u01b0\u1ee1ng ch\u1ebf c\u00e1c \u1ee9ng d\u1ee5ng, ng\u01b0\u1eddi d\u00f9ng ph\u1ea3i tu\u00e2n theo.<\/p>\n\n\n\n<h4 id=\"Permissive_&#8211;_Cho_ph\u00e9p\"><a id=\"post-44733-_iwd2btcsbya6\"><\/a><strong>Permissive &#8211; Cho ph\u00e9p<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">\u1ede ch\u1ebf \u0111\u1ed9 <strong>Permissive, <\/strong>SELinux s\u1ebd m\u00f4 ph\u1ecfng ch\u00ednh s\u00e1ch <strong>Enforcing <\/strong>b\u1eb1ng c\u00e1ch t\u1ea1o ra c\u00e1c c\u1ea3nh b\u00e1o. Tuy nhi\u00ean, ch\u1ebf \u0111\u1ed9 <strong>Permissive <\/strong>s\u1ebd kh\u00f4ng th\u1ef1c thi b\u1ea5t k\u1ef3 ch\u00ednh s\u00e1ch b\u1ea3o m\u1eadt n\u00e0o, ch\u1ec9 \u0111\u01b0a ra c\u00e1c c\u1ea3nh b\u00e1o cho ng\u01b0\u1eddi d\u00f9ng.<\/p>\n\n\n\n<h4 id=\"Disabled_&#8211;_T\u1eaft\"><a id=\"post-44733-_59jefvgpocpl\"><\/a><strong>Disabled &#8211; T\u1eaft<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Trong ch\u1ebf \u0111\u1ed9 <strong>Disabled, <\/strong>\u0111\u00fang nh\u01b0 c\u00e1i t\u00ean c\u1ee7a m\u00ecnh, SELinux s\u1ebd t\u1eaft ch\u00ednh s\u00e1ch b\u1ea3o m\u1eadt v\u00e0 kh\u00f4ng \u00e9p bu\u1ed9c c\u00e1c ph\u1ea7n m\u1ec1m, ng\u01b0\u1eddi d\u00f9ng th\u1ef1c hi\u1ec7n theo &#8211; \u0111\u00e2y l\u00e0 ch\u1ebf \u0111\u1ed9 kh\u00f4ng \u0111\u01b0\u1ee3c khuy\u1ebfn kh\u00edch n\u1ebfu b\u1ea1n kh\u00f4ng bi\u1ebft c\u00e1ch b\u1ea3o m\u1eadt h\u1ec7 th\u1ed1ng Linux c\u1ee7a m\u00ecnh.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Nh\u01b0ng c\u00e1c ch\u00ednh s\u00e1ch <strong>DAC &#8211; Discretionary Access Control <\/strong>d\u00f9ng \u0111\u1ec3 ki\u1ec3m so\u00e1t c\u00e1c user v\u1eabn ho\u1ea1t \u0111\u1ed9ng nh\u01b0 th\u00f4ng th\u01b0\u1eddng.<\/p>\n\n\n\n<h2 id=\"C\u00e1ch_v\u00f4_hi\u1ec7u_h\u00f3a_SELinux\"><a id=\"post-44733-_r7cx8ox0qetp\"><\/a><strong>C\u00e1ch v\u00f4 hi\u1ec7u h\u00f3a SELinux<\/strong><\/h2>\n\n\n\n<h3 id=\"C\u00e1ch_ki\u1ec3m_tra_tr\u1ea1ng_th\u00e1i_c\u1ee7a_SELinux\"><a id=\"post-44733-_dl6yre4mrr3p\"><\/a><strong>C\u00e1ch ki\u1ec3m tra tr\u1ea1ng th\u00e1i c\u1ee7a SELinux<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u0110\u1ec3 ki\u1ec3m tra tr\u1ea1ng th\u00e1i c\u1ee7a SELinux, th\u00f4ng th\u01b0\u1eddng, ta s\u1ebd s\u1eed d\u1ee5ng l\u1ec7nh \u201c<strong>sestatus\u201d <\/strong>trong <strong>command line <\/strong>\u0111\u1ec3 ki\u1ec3m tra \u0111\u1ea7y \u0111\u1ee7 th\u00f4ng tin.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">V\u00ed d\u1ee5 khi ch\u1ea1y l\u1ec7nh \u201c<strong>sestatus\u201d, <\/strong>h\u1ec7 th\u1ed1ng s\u1ebd tr\u1ea3 l\u1ea1i cho b\u1ea1n th\u00f4ng tin nh\u01b0 sau:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code># sestatus\nSELinux status: enabled\nSELinuxfs mount: \/sys\/fs\/selinux\nSELinux root directory: \/etc\/selinux\nLoaded policy name: default\nCurrent mode: permissive\nMode from config file: permissive\nPolicy MLS status: enabled\nPolicy deny_unknown status: allowed\nMax kernel policy version: 30<\/code><\/pre>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter\"><img decoding=\"async\" width=\"563\" height=\"284\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2021\/12\/word-image-826.png\" alt=\"selinux-la-gi\" class=\"wp-image-44775\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2021\/12\/word-image-826.png 563w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2021\/12\/word-image-826-300x151.png 300w\" sizes=\"(max-width: 563px) 100vw, 563px\" \/><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Sau khi ki\u1ec3m tra, b\u1ea1n c\u00f3 th\u1ec3 quy\u1ebft \u0111\u1ecbnh b\u1eadt ho\u1eb7c t\u1eaft SELinux n\u1ebfu ch\u1ebf \u0111\u1ed9 c\u1ee7a SELinux l\u00e0 <strong>Enforcing.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">M\u1ed9t s\u1ed1 \u0111i\u1ec3m l\u01b0u \u00fd tr\u01b0\u1edbc khi t\u1eaft SELinux:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>SELinux l\u00e0 h\u1ec7 th\u1ed1ng \u201cph\u00f2ng th\u1ee7\u201d tr\u00e1nh nh\u1eefng s\u1ef1 x\u00e2m ph\u1ea1m c\u1ee7a user ho\u1eb7c ch\u01b0\u01a1ng tr\u00ecnh v\u00e0o h\u1ec7 th\u1ed1ng. Do \u0111\u00f3, khi t\u1eaft SELinux b\u1ea1n s\u1ebd g\u1eb7p nh\u1eefng nguy c\u01a1 v\u1ec1 an to\u00e0n h\u1ec7 th\u1ed1ng c\u1ee7a b\u1ea1n.<\/li>\n\n\n\n<li>Tino Group ch\u1ec9 h\u01b0\u1edbng d\u1eabn c\u00e1ch t\u1eaft, vi\u1ec7c th\u1ef1c hi\u1ec7n hay kh\u00f4ng do b\u1ea1n quy\u1ebft \u0111\u1ecbnh. N\u1ebfu h\u1ec7 th\u1ed1ng c\u1ee7a b\u1ea1n g\u1eb7p ph\u1ea3i c\u00e1c t\u1ea5n c\u00f4ng ngo\u00e0i \u00fd mu\u1ed1n, tr\u00e1ch nhi\u1ec7m s\u1ebd do b\u1ea1n t\u1ef1 gi\u1ea3i quy\u1ebft. Ch\u00fang t\u00f4i s\u1ebd kh\u00f4ng h\u1ed7 tr\u1ee3 s\u1eeda ch\u1eefa hay ch\u1ecbu tr\u00e1ch nhi\u1ec7m v\u1ec1 nh\u1eefng l\u1ed7i n\u00e0y.<\/li>\n<\/ul>\n\n\n\n<h3 id=\"C\u00e1ch_v\u00f4_hi\u1ec7u_h\u00f3a_SELinux_t\u1ea1m_th\u1eddi\"><a id=\"post-44733-_n280iuobbem1\"><\/a><strong>C\u00e1ch v\u00f4 hi\u1ec7u h\u00f3a SELinux t\u1ea1m th\u1eddi<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u0110\u1ec3 <strong>t\u1ea1m th\u1eddi v\u00f4 hi\u1ec7u h\u00f3a SELinux, <\/strong>b\u1ea1n s\u1eed d\u1ee5ng 1 trong 2 l\u1ec7nh sau:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>$ echo 0 &gt; \/selinux\/enforce\n$ setenforce 0<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0110\u1ed1i v\u1edbi c\u00e1ch n\u00e0y, to\u00e0n b\u1ed9 ch\u00ednh s\u00e1ch b\u1ea3o m\u1eadt c\u1ee7a SELinux s\u1ebd t\u1ea1m th\u1eddi v\u00f4 hi\u1ec7u ho\u00e1 cho \u0111\u1ebfn khi b\u1ea1n kh\u1edfi \u0111\u1ed9ng l\u1ea1i h\u1ec7 th\u1ed1ng. Trong tr\u01b0\u1eddng h\u1ee3p b\u1ea1n \u0111\u00e3 c\u00e0i \u0111\u1eb7t xong ph\u1ea7n m\u1ec1m, b\u1ea1n th\u1ef1c hi\u1ec7n l\u1ec7nh sau \u0111\u1ec3 m\u1edf l\u1ea1i SELinux:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>$ echo 1 &gt; \/selinux\/enforce\n$ setenforce 1<\/code><\/pre>\n\n\n\n<h3 id=\"C\u00e1ch_v\u00f4_hi\u1ec7u_h\u00f3a_SELinux_v\u00f4_th\u1eddi_h\u1ea1n\"><a id=\"post-44733-_oxeniode3rc3\"><\/a><strong>C\u00e1ch v\u00f4 hi\u1ec7u h\u00f3a SELinux v\u00f4 th\u1eddi h\u1ea1n<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Tino Group kh\u00f4ng khuy\u1ebfn kh\u00edch th\u1ef1c hi\u1ec7n n\u1ebfu b\u1ea1n kh\u00f4ng c\u00f3 nhi\u1ec1u ki\u1ebfn th\u1ee9c khi s\u1eed d\u1ee5ng Linux v\u00e0 ki\u1ebfn th\u1ee9c v\u1ec1 b\u1ea3o m\u1eadt nh\u1eb1m tr\u00e1nh t\u00ecnh tr\u1ea1ng b\u1ecb t\u1ea5n c\u00f4ng b\u1ea5t ng\u1edd.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0110\u1ec3 <strong>v\u00f4 hi\u1ec7u ho\u00e1 SELinux v\u00f4 th\u1eddi h\u1ea1n, <\/strong>ch\u00fang ta s\u1ebd s\u1eeda file <strong>config <\/strong>trong SELinux.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>B\u01b0\u1edbc 1: <\/strong>truy c\u1eadp v\u00e0o file <strong>config <\/strong>b\u1eb1ng l\u1ec7nh:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>$ vi \/etc\/selinux\/config<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>B\u01b0\u1edbc 2: <\/strong>thay \u0111\u1ed5i d\u00f2ng <strong>SELINUX=enforcing<\/strong> th\u00e0nh <strong>SELINUX=disabled <\/strong>v\u00e0 l\u01b0u l\u1ea1i.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code># SELINUX= can take one of these three values:\n# enforcing - SELinux security policy is enforced.\n# permissive - SELinux prints warnings instead of enforcing.\n# disabled - No SELinux policy is loaded.\nSELINUX=disabled<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>B\u01b0\u1edbc 3: <\/strong>sau khi l\u01b0u l\u1ea1i, b\u1ea1n kh\u1edfi \u0111\u1ed9ng l\u1ea1i to\u00e0n b\u1ed9 h\u1ec7 th\u1ed1ng \u0111\u1ec3 \u00e1p d\u1ee5ng c\u00e0i \u0111\u1eb7t m\u1edbi.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">T\u01b0\u01a1ng t\u1ef1, khi b\u1ea1n \u0111\u00e3 v\u00f4 hi\u1ec7u h\u00f3a SELinux t\u1ea1m th\u1eddi, b\u1ea1n c\u00f3 th\u1ec3 m\u1edf l\u1ea1i SELinux b\u1eb1ng c\u00e1ch \u0111\u1ed5i <strong>SELINUX=disabled<\/strong> th\u00e0nh <strong>SELINUX=enforcing <\/strong>trong file <strong>config.<\/strong><\/p>\n\n\n\n<h3 id=\"Ki\u1ec3m_tra_h\u1ec7_th\u1ed1ng_\u0111\u00e3_v\u00f4_hi\u1ec7u_ho\u00e1_SELinux_hay_ch\u01b0a\"><a id=\"post-44733-_mjc8q6d5y713\"><\/a><strong>Ki\u1ec3m tra h\u1ec7 th\u1ed1ng \u0111\u00e3 v\u00f4 hi\u1ec7u ho\u00e1 SELinux hay ch\u01b0a<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">B\u1ea1n c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng l\u1ec7nh \u201c<strong>getenforce<\/strong>\u201d \u0111\u1ec3 hi\u1ec3n th\u1ecb nhanh tr\u1ea1ng th\u00e1i c\u1ee7a SELinux. Tuy nhi\u00ean, l\u1ec7nh \u201c<strong>getenforce<\/strong>\u201d ch\u1ec9 hi\u1ec3n th\u1ecb duy nh\u1ea5t th\u00f4ng tin tr\u1ea1ng th\u00e1i c\u1ee7a SELinux l\u00e0<strong> \u201cEnforcing&#8221;, &#8220;Permissive&#8221; <\/strong>ho\u1eb7c <strong>&#8220;Disabled&#8221;.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">H\u1ec7 th\u1ed1ng hi\u1ec3n th\u1ecb <strong>Disabled <\/strong>\u0111\u1ed3ng ngh\u0129a v\u1edbi vi\u1ec7c b\u1ea1n \u0111\u00e3 v\u00f4 hi\u1ec7u h\u00f3a SELinux th\u00e0nh c\u00f4ng.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter\"><img decoding=\"async\" width=\"185\" height=\"103\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2021\/12\/word-image-834.png\" alt=\"selinux-la-gi\" class=\"wp-image-44783\" title=\"\"><\/figure>\n<\/div>\n\n\n<h2 id=\"C\u00e1ch_ki\u1ec3m_tra_v\u00e0_c\u00e0i_\u0111\u1eb7t_SELinux\"><a id=\"post-44733-_3m2pyb7arndd\"><\/a><strong>C\u00e1ch ki\u1ec3m tra v\u00e0 c\u00e0i \u0111\u1eb7t SELinux<\/strong><\/h2>\n\n\n\n<h3 id=\"Ki\u1ec3m_tra_c\u00e1c_g\u00f3i_SELinux_\u0111\u00e3_c\u00e0i_\u0111\u1eb7t\"><a id=\"post-44733-_p4gfxt8s7aox\"><\/a><strong>Ki\u1ec3m tra c\u00e1c g\u00f3i SELinux \u0111\u00e3 c\u00e0i \u0111\u1eb7t<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Hi\u1ec7n t\u1ea1i, c\u00f3 2 h\u1ec7 \u0111i\u1ec1u h\u00e0nh Linux th\u01b0\u1eddng \u0111\u01b0\u1ee3c c\u00e0i \u0111\u1eb7t s\u1eb5n SELinux l\u00e0 RedHat Enterprise Linux (RHEL) v\u00e0 CentOS. \u0110\u1ec3 ki\u1ec3m tra h\u1ec7 th\u1ed1ng c\u00e0i \u0111\u1eb7t s\u1eb5n cho b\u1ea1n g\u00f3i SELinux n\u00e0o, b\u1ea1n ch\u1ea1y l\u1ec7nh nh\u01b0 sau:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>rpm -qa | grep -i selinux<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Sau khi ch\u1ea1y, h\u1ec7 th\u1ed1ng s\u1ebd tr\u1ea3 l\u1ea1i th\u00f4ng tin g\u00f3i SELinux \u0111\u00e3 c\u00e0i \u0111\u1eb7t trong h\u1ec7 th\u1ed1ng:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code># rpm -qa | grep -i selinux\nselinux-policy-targeted-3.14.3-67.el8.noarch\nlibselinux-utils-2.9-5.el8.x86_64\nrpm-plugin-selinux-4.14.3-13.el8.x86_64\nflatpak-selinux-1.8.5-3.el8.noarch\ncontainer-selinux-2.158.0-1.module_el8.4.0+781+acf4c33b.noarch\npython3-libselinux-2.9-5.el8.x86_64\nselinux-policy-3.14.3-67.el8.noarch\nlibselinux-2.9-5.el8.x86_64<\/code><\/pre>\n\n\n\n<h3 id=\"C\u00e1ch_c\u00e0i_\u0111\u1eb7t_SELinux\"><a id=\"post-44733-_rik8qi3hzvac\"><\/a><strong>C\u00e1ch c\u00e0i \u0111\u1eb7t SELinux<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu b\u1ea1n s\u1eed d\u1ee5ng nh\u1eefng h\u1ec7 \u0111i\u1ec1u h\u00e0nh l\u00e0 c\u00e1c phi\u00ean b\u1ea3n ph\u00e2n ph\u1ed1i kh\u00e1c c\u1ee7a Linux nh\u01b0: <a href=\"https:\/\/tino.vn\/blog\/ubuntu-la-gi\/\" data-type=\"post\" data-id=\"15700\">Ubuntu<\/a> hay <a href=\"https:\/\/tino.vn\/blog\/he-dieu-hanh-debian-la-gi\/\" data-type=\"post\" data-id=\"74552\">Debian<\/a>, nh\u1eefng h\u1ec7 \u0111i\u1ec1u h\u00e0nh n\u00e0y s\u1ebd kh\u00f4ng \u0111\u01b0\u1ee3c c\u00e0i \u0111\u1eb7t s\u1eb5n SELinux.<\/p>\n\n\n\n<h4 id=\"C\u00e1ch_1:_s\u1eed_d\u1ee5ng_atp\"><a id=\"post-44733-_7i0v0gopjayw\"><\/a><strong>C\u00e1ch 1: s\u1eed d\u1ee5ng atp<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">C\u1ea3 2 phi\u00ean b\u1ea3n ph\u00e2n ph\u1ed1i Linux l\u00e0 Ubuntu v\u00e0 Debian, b\u1ea1n ch\u1ea1y code nh\u01b0 sau \u0111\u1ec3 c\u00e0i \u0111\u1eb7t SELinux:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>$ apt-get install selinux-basics selinux-policy-default auditd<\/code><\/pre>\n\n\n\n<h4 id=\"C\u00e1ch_2:_t\u1ea3i_v\u00e0_c\u00e0i_\u0111\u1eb7t_th\u00f4ng_th\u01b0\u1eddng_tr\u00ean_Ubuntu\"><a id=\"post-44733-_l9wc8592w9f\"><\/a><strong>C\u00e1ch 2: t\u1ea3i v\u00e0 c\u00e0i \u0111\u1eb7t th\u00f4ng th\u01b0\u1eddng tr\u00ean Ubuntu<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu b\u1ea1n s\u1eed d\u1ee5ng Ubuntu, b\u1ea1n th\u1ef1c hi\u1ec7n nh\u01b0 sau:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>B\u01b0\u1edbc 1: <\/strong>t\u1ea3i g\u00f3i <a href=\"https:\/\/wiki.debian.org\/SELinux\/Setup?action=AttachFile&amp;do=view&amp;target=_load_selinux_policy\" target=\"_blank\" rel=\"noreferrer noopener nofollow\"><strong>load_selinux_policy<\/strong><\/a> v\u1ec1 thi\u1ebft b\u1ecb<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>B\u01b0\u1edbc 2: copy v\u00e0 d\u00e1n v\u00e0o: \/usr\/share\/initramfs-tools\/scripts\/init-bottom\/<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>B\u01b0\u1edbc 3: <\/strong>b\u1ea1n ch\u1ea1y l\u1ec7nh sau trong <strong>terminal <\/strong>\u0111\u1ec3 kh\u1edfi \u0111\u1ed9ng g\u00f3i:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>update-initramfs -u<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Cu\u1ed1i c\u00f9ng, b\u1ea1n ch\u1ea1y l\u1ea1i l\u1ec7nh \u201c<strong>getenforce<\/strong>\u201d \u0111\u1ec3 ki\u1ec3m tra xem h\u1ec7 th\u1ed1ng \u0111\u00e3 c\u00e0i \u0111\u1eb7t SELinux hay ch\u01b0a.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu SELinux \u0111\u00e3 \u0111\u01b0\u1ee3c c\u00e0i \u0111\u1eb7t, b\u1ea1n c\u00f3 th\u1ec3 kh\u1edfi \u0111\u1ed9ng l\u1ea1i SELinux b\u1eb1ng c\u00e1ch d\u00f9ng l\u1ec7nh nh\u01b0 sau:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code># selinux-activate\n# reboot<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Sau khi reboot, tr\u1ea1ng th\u00e1i c\u1ee7a SELinux s\u1ebd l\u00e0 \u201c<strong>Permissive<\/strong>\u201d.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter\"><img decoding=\"async\" width=\"685\" height=\"308\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2021\/12\/word-image-837.png\" alt=\"selinux-la-gi\" class=\"wp-image-44786\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2021\/12\/word-image-837.png 685w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2021\/12\/word-image-837-300x135.png 300w\" sizes=\"(max-width: 685px) 100vw, 685px\" \/><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">V\u1eady l\u00e0 ch\u00fang ta \u0111\u00e3 t\u00ecm hi\u1ec3u SELinux l\u00e0 g\u00ec, c\u0169ng nh\u01b0 c\u00e1ch v\u00f4 hi\u1ec7u h\u00f3a SELinux \u0111\u1ec3 b\u1ea1n c\u00e0i \u0111\u1eb7t m\u1ed9t s\u1ed1 ph\u1ea7n m\u1ec1m cho Linux ho\u1eb7c c\u00e1c phi\u00ean b\u1ea3n ph\u00e2n ph\u1ed1i c\u1ee7a Linux. Tino Group hi v\u1ecdng r\u1eb1ng, nh\u1eefng ki\u1ebfn th\u1ee9c n\u00e0y s\u1ebd gi\u00fap b\u1ea1n khai th\u00e1c SELinux t\u1ed1t h\u01a1n \u0111\u1ec3 b\u1ea3o v\u1ec7 h\u1ec7 th\u1ed1ng c\u1ee7a m\u00ecnh.<\/p>\n\n\n\n<h2 id=\"FAQs_v\u1ec1_h\u01b0\u1edbng_d\u1eabn_c\u00e1ch_t\u1eaft_SELinux\"><a id=\"post-44733-_enhqrt49hk47\"><\/a><strong>FAQs v\u1ec1 h\u01b0\u1edbng d\u1eabn c\u00e1ch t\u1eaft SELinux<\/strong><\/h2>\n\n\n\t\t<section\t\thelp class=\"sc_fs_faq sc_card    \"\n\t\t\t\t>\n\t\t\t\t<h2 id=\"C\u00f3_n\u00ean_t\u1eaft_SELinux_hay_kh\u00f4ng?\">C\u00f3 n\u00ean t\u1eaft SELinux hay kh\u00f4ng?<\/h2>\t\t\t\t<div>\n\t\t\t\t\t\t<div class=\"sc_fs_faq__content\">\n\t\t\t\t\n\n<p class=\"wp-block-paragraph\">C\u00e2u tr\u1ea3 l\u1eddi s\u1ebd t\u00f9y thu\u1ed9c v\u00e0o b\u1ea1n. N\u1ebfu b\u1ea1n c\u1ea7n c\u00e0i \u0111\u1eb7t m\u1ed9t s\u1ed1 ph\u1ea7n m\u1ec1m v\u00e0 ch\u00fang y\u00eau c\u1ea7u b\u1ea1n ph\u1ea3i t\u1eaft SELinux \u0111\u1ec3 c\u00f3 th\u1ec3 c\u00e0i \u0111\u1eb7t, b\u1ea1n n\u00ean xem x\u00e9t vi\u1ec7c t\u1eaft hay kh\u00f4ng. V\u00ec nhi\u1ec7m v\u1ee5 ch\u00ednh c\u1ee7a SELinux l\u00e0 b\u1ea3o v\u1ec7 h\u1ec7 th\u1ed1ng c\u1ee7a b\u1ea1n.<\/p>\n\n\t\t\t<\/div>\n\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section\t\thelp class=\"sc_fs_faq sc_card    \"\n\t\t\t\t>\n\t\t\t\t<h2 id=\"C\u00e1ch_ki\u1ec3m_tra_nhanh_tr\u1ea1ng_th\u00e1i_ho\u1ea1t_\u0111\u1ed9ng_c\u1ee7a_SELinux_ra_sao?\">C\u00e1ch ki\u1ec3m tra nhanh tr\u1ea1ng th\u00e1i ho\u1ea1t \u0111\u1ed9ng c\u1ee7a SELinux ra sao?<\/h2>\t\t\t\t<div>\n\t\t\t\t\t\t<div class=\"sc_fs_faq__content\">\n\t\t\t\t\n\n<p class=\"wp-block-paragraph\">\u0110\u1ec3 ki\u1ec3m tra tr\u1ea1ng th\u00e1i ho\u1ea1t \u0111\u1ed9ng hi\u1ec7n t\u1ea1i c\u1ee7a SELinux trong v\u00f2ng \u201c1 n\u1ed1t nh\u1ea1c\u201d, b\u1ea1n c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng l\u1ec7nH \u201cgetenforce\u201d. V\u00ed d\u1ee5 nh\u01b0 sau:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li># getenforce<\/li>\n\n\n\n<li>Enforcing<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Enforcing <\/strong>hi\u1ec3n th\u1ecb, \u0111\u1ed3ng ngh\u0129a v\u1edbi vi\u1ec7c SELinux \u0111ang th\u1ef1c thi.<\/p>\n\n\t\t\t<\/div>\n\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section\t\thelp class=\"sc_fs_faq sc_card    \"\n\t\t\t\t>\n\t\t\t\t<h2 id=\"Booleans_trong_SELinux_l\u00e0_g\u00ec?\">Booleans trong SELinux l\u00e0 g\u00ec?<\/h2>\t\t\t\t<div>\n\t\t\t\t\t\t<div class=\"sc_fs_faq__content\">\n\t\t\t\t\n\n<p class=\"wp-block-paragraph\"><strong>Booleans <\/strong>l\u00e0 ch\u1ee9c n\u0103ng b\u1eadt\/ t\u1eaft c\u00e0i \u0111\u1eb7t c\u1ee7a SELinux. V\u1ec1 c\u01a1 b\u1ea3n, b\u1ea1n s\u1ebd hi\u1ec3u l\u00e0 b\u1eadt v\u00e0 t\u1eaft. Nh\u01b0ng trong th\u1ef1c t\u1ebf, c\u00f3 \u0111\u1ebfn h\u00e0ng tr\u0103m c\u00e0i \u0111\u1eb7t ri\u00eang bi\u1ec7t \u0111\u1ec3 b\u1ea1n qu\u1ea3n l\u00fd SELinux m\u1ed9t c\u00e1ch hi\u1ec7u qu\u1ea3 nh\u1ea5t theo m\u1ee5c \u0111\u00edch s\u1eed d\u1ee5ng c\u1ee7a b\u1ea1n.<\/p>\n\n\t\t\t<\/div>\n\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section\t\thelp class=\"sc_fs_faq sc_card    \"\n\t\t\t\t>\n\t\t\t\t<h2 id=\"T\u00e0i_li\u1ec7u_\u0111\u1ec3_qu\u1ea3n_l\u00fd_v\u00e0_s\u1eed_d\u1ee5ng_SELinux_tr\u00ean_CentOS_7_\u1edf_\u0111\u00e2u?\">T\u00e0i li\u1ec7u \u0111\u1ec3 qu\u1ea3n l\u00fd v\u00e0 s\u1eed d\u1ee5ng SELinux tr\u00ean CentOS 7 \u1edf \u0111\u00e2u?<\/h2>\t\t\t\t<div>\n\t\t\t\t\t\t<div class=\"sc_fs_faq__content\">\n\t\t\t\t\n\n<p class=\"wp-block-paragraph\">N\u1ebfu b\u1ea1n mu\u1ed1n t\u00ecm ki\u1ebfm t\u00e0i li\u1ec7u \u0111\u1ec3 qu\u1ea3n l\u00fd v\u00e0 s\u1eed d\u1ee5ng SELinux tr\u00ean CentOS 7 m\u1ed9t c\u00e1ch \u0111\u1ea7y \u0111\u1ee7 v\u00e0 hi\u1ec7u qu\u1ea3, <a href=\"https:\/\/tino.vn\/blog\/huong-dan-dang-ky-vps-digitalocean\/\" data-type=\"post\" data-id=\"27122\">DigitalOcean<\/a> c\u00f3 s\u1eb5n 1 b\u1ed9 t\u00e0i li\u1ec7u:<a href=\"https:\/\/www.digitalocean.com\/community\/tutorial_series\/an-introduction-to-selinux-on-centos-7\" target=\"_blank\" rel=\"noreferrer noopener nofollow\"> <strong>Introduction to SELinux on CentOS 7<\/strong><\/a> v\u1edbi 3 ph\u1ea7n ch\u00ednh bao g\u1ed3m:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Gi\u1edbi thi\u1ec7u c\u01a1 b\u1ea3n<\/li>\n\n\n\n<li>T\u1ec7p v\u00e0 Quy tr\u00ecnh<\/li>\n\n\n\n<li>User<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Sau khi h\u1ecdc v\u00e0 th\u1ef1c hi\u1ec7n h\u1ebft trong t\u00e0i li\u1ec7u n\u00e0y, b\u1ea1n s\u1ebd c\u00f3 m\u1ed9t h\u1ec7 th\u1ed1ng CentOS 7 v\u1edbi c\u00e1c c\u00e0i \u0111\u1eb7t SELinux ho\u00e0n ch\u1ec9nh v\u00e0 k\u00edch ho\u1ea1t, c\u0169ng nh\u01b0 setting 4 ng\u01b0\u1eddi d\u00f9ng v\u1edbi 4 c\u1ea5p \u0111\u1ed9 kh\u00e1c nhau.<\/p>\n\n\t\t\t<\/div>\n\t\t<\/div>\n\t\t<\/section>\n\t\t\n<script type=\"application\/ld+json\">\n\t{\n\t\t\"@context\": \"https:\/\/schema.org\",\n\t\t\"@type\": \"FAQPage\",\n\t\t\"mainEntity\": [\n\t\t\t\t\t{\n\t\t\t\t\"@type\": \"Question\",\n\t\t\t\t\"name\": \"C\u00f3 n\u00ean t\u1eaft SELinux hay kh\u00f4ng?\",\n\t\t\t\t\"acceptedAnswer\": {\n\t\t\t\t\t\"@type\": \"Answer\",\n\t\t\t\t\t\"text\": \"<p>C\u00e2u tr\u1ea3 l\u1eddi s\u1ebd t\u00f9y thu\u1ed9c v\u00e0o b\u1ea1n. N\u1ebfu b\u1ea1n c\u1ea7n c\u00e0i \u0111\u1eb7t m\u1ed9t s\u1ed1 ph\u1ea7n m\u1ec1m v\u00e0 ch\u00fang y\u00eau c\u1ea7u b\u1ea1n ph\u1ea3i t\u1eaft SELinux \u0111\u1ec3 c\u00f3 th\u1ec3 c\u00e0i \u0111\u1eb7t, b\u1ea1n n\u00ean xem x\u00e9t vi\u1ec7c t\u1eaft hay kh\u00f4ng. V\u00ec nhi\u1ec7m v\u1ee5 ch\u00ednh c\u1ee7a SELinux l\u00e0 b\u1ea3o v\u1ec7 h\u1ec7 th\u1ed1ng c\u1ee7a b\u1ea1n.<\/p>\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t}\n\t\t\t,\t\t\t\t{\n\t\t\t\t\"@type\": \"Question\",\n\t\t\t\t\"name\": \"C\u00e1ch ki\u1ec3m tra nhanh tr\u1ea1ng th\u00e1i ho\u1ea1t \u0111\u1ed9ng c\u1ee7a SELinux ra sao?\",\n\t\t\t\t\"acceptedAnswer\": {\n\t\t\t\t\t\"@type\": \"Answer\",\n\t\t\t\t\t\"text\": \"<p>\u0110\u1ec3 ki\u1ec3m tra tr\u1ea1ng th\u00e1i ho\u1ea1t \u0111\u1ed9ng hi\u1ec7n t\u1ea1i c\u1ee7a SELinux trong v\u00f2ng \u201c1 n\u1ed1t nh\u1ea1c\u201d, b\u1ea1n c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng l\u1ec7nH \u201cgetenforce\u201d. V\u00ed d\u1ee5 nh\u01b0 sau:<\/p><ul><li># getenforce<\/li><li>Enforcing<\/li><\/ul><p><strong>Enforcing <\/strong>hi\u1ec3n th\u1ecb, \u0111\u1ed3ng ngh\u0129a v\u1edbi vi\u1ec7c SELinux \u0111ang th\u1ef1c thi.<\/p>\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t}\n\t\t\t,\t\t\t\t{\n\t\t\t\t\"@type\": \"Question\",\n\t\t\t\t\"name\": \"Booleans trong SELinux l\u00e0 g\u00ec?\",\n\t\t\t\t\"acceptedAnswer\": {\n\t\t\t\t\t\"@type\": \"Answer\",\n\t\t\t\t\t\"text\": \"<p><strong>Booleans <\/strong>l\u00e0 ch\u1ee9c n\u0103ng b\u1eadt\/ t\u1eaft c\u00e0i \u0111\u1eb7t c\u1ee7a SELinux. V\u1ec1 c\u01a1 b\u1ea3n, b\u1ea1n s\u1ebd hi\u1ec3u l\u00e0 b\u1eadt v\u00e0 t\u1eaft. Nh\u01b0ng trong th\u1ef1c t\u1ebf, c\u00f3 \u0111\u1ebfn h\u00e0ng tr\u0103m c\u00e0i \u0111\u1eb7t ri\u00eang bi\u1ec7t \u0111\u1ec3 b\u1ea1n qu\u1ea3n l\u00fd SELinux m\u1ed9t c\u00e1ch hi\u1ec7u qu\u1ea3 nh\u1ea5t theo m\u1ee5c \u0111\u00edch s\u1eed d\u1ee5ng c\u1ee7a b\u1ea1n.<\/p>\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t}\n\t\t\t,\t\t\t\t{\n\t\t\t\t\"@type\": \"Question\",\n\t\t\t\t\"name\": \"T\u00e0i li\u1ec7u \u0111\u1ec3 qu\u1ea3n l\u00fd v\u00e0 s\u1eed d\u1ee5ng SELinux tr\u00ean CentOS 7 \u1edf \u0111\u00e2u?\",\n\t\t\t\t\"acceptedAnswer\": {\n\t\t\t\t\t\"@type\": \"Answer\",\n\t\t\t\t\t\"text\": \"<p>N\u1ebfu b\u1ea1n mu\u1ed1n t\u00ecm ki\u1ebfm t\u00e0i li\u1ec7u \u0111\u1ec3 qu\u1ea3n l\u00fd v\u00e0 s\u1eed d\u1ee5ng SELinux tr\u00ean CentOS 7 m\u1ed9t c\u00e1ch \u0111\u1ea7y \u0111\u1ee7 v\u00e0 hi\u1ec7u qu\u1ea3, <a>DigitalOcean<\/a> c\u00f3 s\u1eb5n 1 b\u1ed9 t\u00e0i li\u1ec7u:<a><strong>Introduction to SELinux on CentOS 7<\/strong><\/a> v\u1edbi 3 ph\u1ea7n ch\u00ednh bao g\u1ed3m:<\/p><ol><li>Gi\u1edbi thi\u1ec7u c\u01a1 b\u1ea3n<\/li><li>T\u1ec7p v\u00e0 Quy tr\u00ecnh<\/li><li>User<\/li><\/ol><p>Sau khi h\u1ecdc v\u00e0 th\u1ef1c hi\u1ec7n h\u1ebft trong t\u00e0i li\u1ec7u n\u00e0y, b\u1ea1n s\u1ebd c\u00f3 m\u1ed9t h\u1ec7 th\u1ed1ng CentOS 7 v\u1edbi c\u00e1c c\u00e0i \u0111\u1eb7t SELinux ho\u00e0n ch\u1ec9nh v\u00e0 k\u00edch ho\u1ea1t, c\u0169ng nh\u01b0 setting 4 ng\u01b0\u1eddi d\u00f9ng v\u1edbi 4 c\u1ea5p \u0111\u1ed9 kh\u00e1c nhau.<\/p>\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t}\n\t\t\t\t\t\t]\n\t}\n<\/script>\n\n\n","protected":false},"excerpt":{"rendered":"<p>Trong qu\u00e1 tr\u00ecnh s\u1eed d\u1ee5ng Linux, khi b\u1ea1n c\u00e0i \u0111\u1eb7t m\u1ed9t ph\u1ea7n m\u1ec1m n\u00e0o \u0111\u00f3, ch\u00fang s\u1ebd y\u00eau c\u1ea7u b\u1ea1n v\u00f4 hi\u1ec7u h\u00f3a SELinux. V\u1eady, SELinux l\u00e0 g\u00ec? T\u1eaft SELinux c\u00f3 an to\u00e0n hay kh\u00f4ng? C\u00e1ch t\u1eaft SELinux nh\u01b0 th\u1ebf n\u00e0o? C\u00e1ch s\u1eed d\u1ee5ng SELinux ra sao? T\u1ea5t c\u1ea3 c\u00e2u h\u1ecfi s\u1ebd \u0111\u01b0\u1ee3c Tino Group [&hellip;]<\/p>\n","protected":false},"author":4,"featured_media":44759,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5404],"tags":[6187],"class_list":["post-44733","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-webmasters","tag-ho-tro-developer"],"_links":{"self":[{"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/posts\/44733","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/comments?post=44733"}],"version-history":[{"count":0,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/posts\/44733\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/media\/44759"}],"wp:attachment":[{"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/media?parent=44733"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/categories?post=44733"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/tags?post=44733"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}