SELinux Lösungen - Versionsgeschichte

Linkai.zhang: /* Verlegen eines SSH-Ports */

2023-01-17T13:58:41Z

Verlegen eines SSH-Ports

Linkai.zhang: /* Verlegen eines SSH-Ports */

2023-01-17T13:56:33Z

Verlegen eines SSH-Ports

Linkai.zhang: /* Verlegen eines SSH-Ports */

2023-01-17T13:56:15Z

Verlegen eines SSH-Ports

Linkai.zhang: /* Verlegen eines SSH-Ports */

2023-01-17T13:55:41Z

Verlegen eines SSH-Ports

Linkai.zhang: /* Verlegen eines SSH-Ports */

2023-01-17T13:54:55Z

Verlegen eines SSH-Ports

Linkai.zhang am 12. Januar 2023 um 14:43 Uhr

2023-01-12T14:43:49Z

Linkai.zhang am 12. Januar 2023 um 14:30 Uhr

2023-01-12T14:30:02Z

Linkai.zhang am 12. Januar 2023 um 14:25 Uhr

2023-01-12T14:25:15Z

Linkai.zhang am 12. Januar 2023 um 14:24 Uhr

2023-01-12T14:24:25Z

Linkai.zhang: Die Seite wurde neu angelegt: „ = Verlegen eines SSH-Ports = * grep “^Port” /etc/ssh/sshd_config Port 9922 * grep “set allowed_tc…“

2023-01-12T14:23:09Z

Die Seite wurde neu angelegt: „<span id="verlegen-eines-ssh-ports"></span> = Verlegen eines SSH-Ports = * grep “^Port” /etc/ssh/sshd_config  Port 9922 * grep “set allowed_tc…“

Neue Seite

<span id="verlegen-eines-ssh-ports"></span>
= Verlegen eines SSH-Ports =

* grep “^Port” /etc/ssh/sshd_config


Port 9922
* grep “set allowed_tcp_dports” –after-context=3 /etc/nftables/main.nft


set allowed_tcp_dports {
type inet_service
elements = { ssh, 9090, '''9922''' }
}
* systemctl restart nftables
* semanage port -a -p tcp 9922 -t ssh_port_t
* systemctl restart sshd
* systemctl status sshd


● sshd.service - OpenSSH server daemon
Loaded: loaded (/usr/lib/systemd/system/sshd.service; enabled; preset: enabled)
Active: active (running) since Thu 2023-01-12 15:11:46 CET; 2s ago
Docs: man:sshd(8)
man:sshd_config(5)
Main PID: 13188 (sshd)
Tasks: 1 (limit: 2311)
Memory: 1.3M
CPU: 10ms
CGroup: /system.slice/sshd.service
└─13188 "sshd: /usr/sbin/sshd -D [listener] 0 of 10-100 startups"

Jan 12 15:11:46 fedora systemd[1]: Starting sshd.service - OpenSSH server daemon...
Jan 12 15:11:46 fedora sshd[13188]: Server listening on 0.0.0.0 port 9922.
Jan 12 15:11:46 fedora sshd[13188]: Server listening on :: port 9922.
Jan 12 15:11:46 fedora systemd[1]: Started sshd.service - OpenSSH server daemon.
* grep “set allowed_tcp_dports” –after-context=3 /etc/nftables/main.nft


set allowed_tcp_dports {
type inet_service
elements = { ssh, 9090, '''80''' }
}
* systemctl restart nftables
* mkdir -p /web/html
* cd /etc/httpd/conf
* cp httpd.conf{,.orig}
* sed ‘s/var/www/web/g’ httpd.conf.orig > httpd.conf
* systemctl start httpd
* semanage fcontext -a -t httpd_sys_content_t "/web(/.*)?"
* restorecon -R /web
* ls -dlZ /web

← Nächstältere Version		Version vom 12. Januar 2023, 14:24 Uhr
Zeile 51:		Zeile 51:
	* restorecon -R /web		* restorecon -R /web
	* ls -dlZ /web		* ls -dlZ /web
		+	* curl localhost/test
		+
		+	<!----->
		+	Hello, world!

@@ Zeile 40: / Zeile 40: @@
   set allowed_tcp_dports {
       type inet_service
-      elements = { ssh, 9090, '''88''' }
+      elements = { ssh, 9090, '''90''' }
+  }
 * systemctl restart nftables

@@ Zeile 32: / Zeile 32: @@
   Jan 12 15:11:46 fedora systemd[1]: Starting sshd.service - OpenSSH server daemon...
-  Jan 12 15:11:46 fedora sshd[13188]: Server listening on 0.0.0.0 port 9922.
+  Jan 12 15:11:46 fedora sshd[13188]: Server listening on 0.0.0.0 port 8472.
-  Jan 12 15:11:46 fedora sshd[13188]: Server listening on :: port 9922.
+  Jan 12 15:11:46 fedora sshd[13188]: Server listening on :: port 8472.
   Jan 12 15:11:46 fedora systemd[1]: Started sshd.service - OpenSSH server daemon.
 * grep &quot;set allowed_tcp_dports&quot; --after-context=3 /etc/nftables/main.nft

@@ Zeile 5: / Zeile 5: @@
 <!----->
-  Port 9922
+  Port 8472
 * grep &quot;set allowed_tcp_dports&quot; --after-context=3 /etc/nftables/main.nft
@@ Zeile 11: / Zeile 11: @@
   set allowed_tcp_dports {
       type inet_service
-      elements = { ssh, 9090, '''9922''' }
+      elements = { ssh, 9090, '''8472''' }
+  }
 * systemctl restart nftables
-* semanage port -a -p tcp 9922 -t ssh_port_t
+* semanage port -a -p tcp 8472 -t ssh_port_t
 * systemctl restart sshd
 * systemctl status sshd

@@ Zeile 46: / Zeile 46: @@
 * cd /etc/httpd/conf
 * cp httpd.conf{,.orig}
-* sed ‘s/var\/www/web/g’ httpd.conf.orig &gt; httpd.conf
+* sed 's/var\/www/web/g' httpd.conf.orig &gt; httpd.conf
 * systemctl start httpd
 * semanage fcontext -a -t httpd_sys_content_t &quot;/web(/.*)?&quot;