No AVC when using non-standard SSH port

Chuck Anderson cra at WPI.EDU
Sat Dec 26 04:27:03 UTC 2009


On Fri, Dec 25, 2009 at 11:40:23PM -0400, Jorge Fábregas wrote:
> I'm using Fedora 12 and was wondering why, If I I run my sshd on a non-
> standard port...why don't SELinux registers an access violation? 
> 
> I see that  "ssh_port_t" is there (attached to port 22) ... Is this not 
> implemented yet for SSHD?

On F11, I was required to use this policy to bind sshd to a 
non-standard port.  I haven't upgraded this particular system to F12 
yet, so I'm not sure if it is required there.

policy_module(sshd, 1.0)

require {
        type sshd_t;
}

#============= sshd_t ==============
corenet_tcp_bind_http_port(sshd_t)




More information about the fedora-selinux-list mailing list