No AVC when using non-standard SSH port
Chuck Anderson
cra at WPI.EDU
Sat Dec 26 04:27:03 UTC 2009
On Fri, Dec 25, 2009 at 11:40:23PM -0400, Jorge Fábregas wrote:
> I'm using Fedora 12 and was wondering why, If I I run my sshd on a non-
> standard port...why don't SELinux registers an access violation?
>
> I see that "ssh_port_t" is there (attached to port 22) ... Is this not
> implemented yet for SSHD?
On F11, I was required to use this policy to bind sshd to a
non-standard port. I haven't upgraded this particular system to F12
yet, so I'm not sure if it is required there.
policy_module(sshd, 1.0)
require {
type sshd_t;
}
#============= sshd_t ==============
corenet_tcp_bind_http_port(sshd_t)
More information about the fedora-selinux-list
mailing list