Ssh – Selinux semanage delete or modify chain

selinuxssh

I use on all my server port 24 for SSH. After change port i got error because Selinux block server SSHD restart

4 08:08:02 kvm452 sshd[18297]: error: Bind to port 24 on 0.0.0.0 failed: Permission denied.
May  4 08:08:02 kvm452 sshd[18297]: error: Bind to port 24 on :: failed: Permission denied.
May  4 08:08:02 kvm452 sshd[18297]: fatal: Cannot bind any address.

But if Selinux it's active (Centos 6.X) port 24 it's assigned to Cyrus

lmtp_port_t                    tcp      24
lmtp_port_t                    udp      24

Well I like change port for use port 24 with SSHD

semanage port -a -t ssh_port_t -p tcp 24
    /usr/sbin/semanage: Port tcp/24 already defined

Try delete chain semanage
port -d -p tcp 24 /usr/sbin/semanage:
Port tcp/24 is defined in policy, cannot be deleted

Try several options, but i d'n't see solution. On manpage only say:

 -d, --delete
      Delete a OBJECT record NAME

Best Answer

You should use a non well-known port, something above 1024.

Related Topic