Join Sean Colins for an in-depth discussion in this video Changing ports on services, part of Linux: Firewalls and SELinux.
- [Sean] Depending on policy configuration…services can only be allowed to run…on certain port numbers, right?…Attempting to change the port a service runs on…without changing the policy…is going to result in the service failing to start…because selinux is going to stop it.…You're going to use the semanage utility…as the root user to list the ports that selinux allows…your service to run on.…Since we're using httpd as our example process…throughout this course…we're going to use that one, okay?…So, you're going to be in as root as I am here.…Just enter sudo-s and enter your password…and then you're going to type in semanage…and then port…and we're just going to list the port, right?…So -l and we're going to pipe this to grep because that's…going to give us just what we're looking for here.…
And then -w http_port_t…with the proper underscores in there.…Okay, and then hit return…and you're going to see that http_port_t is on…tcp 80, 81, 443…488, 8008, 8009…all the standard stuff, right?…So, okay.…That's great.…What if you wanted to add a port number?…
- Working with iptables
- Installing Firewalld
- Exploring zones and services
- Allowing the Apache web server
- Allowing FTP and SFTP servers
- Installing SELinux utils
- Setting discretionary or mandatory access
- Installing SELinux man pages
- Working with Booleans
- Changing context labels
- Running sepolicy
- Finding SELinux logs
- Making domains permissive
- Disabling and reenabling SELinux
Skill Level Intermediate
Linux: Multitasking at the Command Linewith Scott Simpson39m 1s Intermediate
1. Firewall Basics on Linux
2. Configuring Firewalld for Local Protection
3. SELinux Fundamentals
4. Working with SELinux
5. SELinux Troubleshooting
Next steps3m 4s
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.