custom ssh port - selinux hate me

[hastar]

Hi

never faced before with linux so my question could be stupid. Sorry in advance .

Yesterday ordered VPS and today been trying to set up my server on centos. I found a lot of similiar manuals like here https://www.globo.tech/learning-center/ ... entos-7/or https://www.liberiangeek.net/2014/11/ch ... -centos-7/ where is written how to change ssh port. And on the step

semanage port -a -t ssh_port_t -p tcp 2222

i got this message


https://ru.imgbb.com/

What is it and how to fix it?

[mghe]

Probably You have disable SELinux,

Check it:

$ vi /etc/selinux/config

[TrevorH]

Or your VPS supplied kernel is not a CentOS one and does not have selinux support? What does uname -a say?

[hastar]

Centos 7 100%

Code: Select all

getenforce
Disabled

Code: Select all

# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
#     enforcing - SELinux security policy is enforced.
#     permissive - SELinux prints warnings instead of enforcing.
#     disabled - No SELinux policy is loaded.
SELINUX=enforcing
# SELINUXTYPE= can take one of three two values:
#     targeted - Targeted processes are protected,
#     minimum - Modification of targeted policy. Only selected processes are protected.
#     mls - Multi Level Security protection.
SELINUXTYPE=targeted

[hunter86_bg]

Could you check /proc/cmdline ?

[hastar]

Code: Select all

BOOT_IMAGE=/vmlinuz-3.10.0-693.2.2.el7.x86_64 root=UUID=8b418802-e75d-4895-b14a-8b95c1fbadb1 ro consoleblank=0 fsck.repair=yes crashkernel=auto selinux=0 rhgb quiet LANG=en_US.UTF-8 elevator=noop

[TrevorH]

"selinux=0"

[hastar]

That's read only file
does it mean that it will be always disabled on this centos (was installed automaticaly after i ordered vps)? and if i want to enable i have to install another version of centos?

[TrevorH]

That's the record the kernel keeps of the parameters that were passed to it by grub. To change it, you need to change /boot/grub2/grub.cfg or its EFI equivalent.

[hastar]

hi
at the top of /boot/grub2/grub.cfg :

Code: Select all

# DO NOT EDIT THIS FILE
#
# It is automatically generated by grub2-mkconfig using templates
# from /etc/grub.d and settings from /etc/default/grub
#

i opened /etc/default/grub :

Code: Select all

GRUB_TIMEOUT=5
GRUB_DISTRIBUTOR="$(sed 's, release .*$,,g' /etc/system-release)"
GRUB_DEFAULT=saved
GRUB_DISABLE_SUBMENU=true
GRUB_TERMINAL_OUTPUT="console"
GRUB_CMDLINE_LINUX="consoleblank=0 fsck.repair=yes crashkernel=auto selinux=0 rhgb quiet"
GRUB_DISABLE_RECOVERY="true"

changed selinux=0 to selinux=1

rebooted system

still geting

Code: Select all

BOOT_IMAGE=/vmlinuz-3.10.0-693.2.2.el7.x86_64 root=UUID=8b418802-e75d-4895-b14a-8b95c1fbadb1 ro consoleblank=0 fsck.repair=yes crashkernel=auto selinux=0 rhgb quiet LANG=en_US.UTF-8 elevator=noop

in /proc/cmdline

even if i delete this parameter selinux=0 from /etc/default/grub