need howto for SELinux config--ssh on non-standard port

James Wilkinson fedora at aprilcottage.co.uk
Mon Jan 11 20:44:51 UTC 2010


John Poelstra wrote:
> I'm running sshd on a high (>1024) port number and cannot find a
> clear step by step guide for configuring this correctly on Fedora 12
> on google.... I've come across lots of random bugs and forum
> questions, but nothing that starts at the beginning of the process
> through the end.

Simplest way:

 * run system-config-selinux;
 * click on Network Port;
 * look up the SELinux Port Type for port 22 (the normal SSH port); 
 * click on add;
 * enter the appropriate port number and SELinux Type.

If you want a command line equivalent, then try 
semanage port -a -t ssh_port_t -p tcp 344
(I haven’t tried this one, but it’s only lightly modified from the
semanage man page).

Hope this helps,

James.

-- 
E-mail:     james@ | Bond films are about seducing beautiful girls, gadgets,
aprilcottage.co.uk | and defeating supervillains who never seem to learn that
                   | the way to deal with James Bond is simply to shoot him.
                   |     -- Professor Steven Dutch


More information about the users mailing list