One of the first things I do when setting up a new host is move the sshd
port. As stated now (finally!) in the /etc/ssh/sshd_config file:
# If you want to change the port on a SELinux system, you have to tell
# SELinux about this change.
# semanage port -a -t ssh_port_t -p tcp #PORTNUMBER
So...
semanage port -a -t ssh_port_t -p tcp 223
[ 2364.773457] SELinux: Permission audit_read in class capability2 not
defined in policy.
[ 2364.781668] SELinux: the above unknown classes and permissions will
be allowed
[ 2365.223619] SELinux: Context
system_u:unconfined_r:sandbox_t:s0-s0:c0.c1023 became invalid (unmapped).
[ 2366.235439] SELinux: Context
unconfined_u:system_r:vbetool_t:s0-s0:c0.c1023 became invalid (unmapped).
[ 2371.093678] SELinux: Context
unconfined_u:unconfined_r:sandbox_t:s0-s0:c0.c1023 became invalid
(unmapped).
[ 2375.355504] SELinux: Context
system_u:system_r:vbetool_t:s0-s0:c0.c1023 became invalid (unmapped).
But I CAN connect to SSH on my selected port. So are these just warning
messages that have been left on for testing.
--
test mailing list
test@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe:
https://admin.fedoraproject.org/mailman/listinfo/test
