centos 7 cant change ssh port - selinux policy 30 missing The 2019 Stack Overflow Developer Survey Results Are In Announcing the arrival of Valued Associate #679: Cesar Manara Planned maintenance scheduled April 17/18, 2019 at 00:00UTC (8:00pm US/Eastern) Come Celebrate our 10 Year Anniversary!How to secure JBoss application server using SELinuxSeLinux blocking connection to sshd on Ubuntu 9.10Problem with upgrading OpenSSH to the latest versionConfiguration for Ubuntu SELinux with sshdSelinux semanage delete or modify chainchange selinux port policy (memcached)Opening a firewall port in RHEL 6.8SELinux - Allow system_u and new SELinux user to log in via SSHselinux in a chroot environmentGet SSH port of an ec2-instance
Why did all the guest students take carriages to the Yule Ball?
Can a novice safely splice in wire to lengthen 5V charging cable?
Is it ethical to upload a automatically generated paper to a non peer-reviewed site as part of a larger research?
Derivation tree not rendering
Do working physicists consider Newtonian mechanics to be "falsified"?
Semisimplicity of the category of coherent sheaves?
Mortgage adviser recommends a longer term than necessary combined with overpayments
system() function string length limit
How do you keep chess fun when your opponent constantly beats you?
Simulating Exploding Dice
What was the last x86 CPU that did not have the x87 floating-point unit built in?
Why can't wing-mounted spoilers be used to steepen approaches?
If the empty set is a subset of every set, why write ... ∪ ∅?
Is there a writing software that you can sort scenes like slides in PowerPoint?
Am I ethically obligated to go into work on an off day if the reason is sudden?
Did God make two great lights or did He make the great light two?
The following signatures were invalid: EXPKEYSIG 1397BC53640DB551
Why does the Event Horizon Telescope (EHT) not include telescopes from Africa, Asia or Australia?
I could not break this equation. Please help me
How are presidential pardons supposed to be used?
how can a perfect fourth interval be considered either consonant or dissonant?
Windows 10: How to Lock (not sleep) laptop on lid close?
What aspect of planet Earth must be changed to prevent the industrial revolution?
Does Parliament hold absolute power in the UK?
centos 7 cant change ssh port - selinux policy 30 missing
The 2019 Stack Overflow Developer Survey Results Are In
Announcing the arrival of Valued Associate #679: Cesar Manara
Planned maintenance scheduled April 17/18, 2019 at 00:00UTC (8:00pm US/Eastern)
Come Celebrate our 10 Year Anniversary!How to secure JBoss application server using SELinuxSeLinux blocking connection to sshd on Ubuntu 9.10Problem with upgrading OpenSSH to the latest versionConfiguration for Ubuntu SELinux with sshdSelinux semanage delete or modify chainchange selinux port policy (memcached)Opening a firewall port in RHEL 6.8SELinux - Allow system_u and new SELinux user to log in via SSHselinux in a chroot environmentGet SSH port of an ec2-instance
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
I'm running centos 7.3 with LAMP
After changing my ssh port in /etc/ssh/sshd_config I have run
semanage port -a -t ssh_port_t -p tcp <my port>
But its kicking out the following error
SELinux: Could not downgrade policy file /etc/selinux/targeted/policy/policy.30, searching for an older version.
SELinux: Could not open policy file <= /etc/selinux/targeted/policy/policy.30: No such file or directory
libsemanage.semanage_reload_policy: load_policy returned error code 2. (No such file or directory).
SELinux: Could not downgrade policy file /etc/selinux/targeted/policy/policy.30, searching for an older version.
SELinux: Could not open policy file <= /etc/selinux/targeted/policy/policy.30: No such file or directory
/sbin/load_policy: Can't load policy: No such file or directory
libsemanage.semanage_reload_policy: load_policy returned error code 2. (No such file or directory).
OSError: No such file or directory
Im running a cloud storage on this server and what to get rid of the default port 22 before I start throwing work on it :(
any ideas ?
ssh centos7 selinux
asked Sep 21 '17 at 19:33
Jim VennerJim Venner
12
|
show 4 more comments
I'm running centos 7.3 with LAMP
After changing my ssh port in /etc/ssh/sshd_config I have run
semanage port -a -t ssh_port_t -p tcp <my port>
But its kicking out the following error
SELinux: Could not downgrade policy file /etc/selinux/targeted/policy/policy.30, searching for an older version.
SELinux: Could not open policy file <= /etc/selinux/targeted/policy/policy.30: No such file or directory
libsemanage.semanage_reload_policy: load_policy returned error code 2. (No such file or directory).
SELinux: Could not downgrade policy file /etc/selinux/targeted/policy/policy.30, searching for an older version.
SELinux: Could not open policy file <= /etc/selinux/targeted/policy/policy.30: No such file or directory
/sbin/load_policy: Can't load policy: No such file or directory
libsemanage.semanage_reload_policy: load_policy returned error code 2. (No such file or directory).
OSError: No such file or directory
Im running a cloud storage on this server and what to get rid of the default port 22 before I start throwing work on it :(
any ideas ?
ssh centos7 selinux
asked Sep 21 '17 at 19:33
Jim VennerJim Venner
12
1
What isSELinuxstatus ?$ sestatus
– krisFR
Sep 21 '17 at 20:15
@krisFR sestatus reports it to be disabled but in the config it's set to enforcing?
– Jim Venner
Sep 22 '17 at 8:06
My guess is you get this error message because SELinux is disabled sosemanagekicks you out. If SELinux is set toenforcingin the config file, then maybe the change was made in the file but not applied by rebooting the server.
– krisFR
Sep 22 '17 at 8:18
Thanks for the reply @krisFR A reboot of the server however still shows it to be disabled with the config saying its set to enforcing. I have checked that the symlink is in place and it is with both /etc/sysconfig/selinux and /etc/selinux/config reporting the same. I look at cat /proc/cmdline shows no reference to selinux so it's not a kernel thing.
– Jim Venner
Sep 22 '17 at 8:44
1
hmm you may miss the packageselinux-policy-targeted, check if it is installed on your system, and if not, try to install it.
– krisFR
Sep 22 '17 at 9:53
|
show 4 more comments
I'm running centos 7.3 with LAMP
After changing my ssh port in /etc/ssh/sshd_config I have run
semanage port -a -t ssh_port_t -p tcp <my port>
But its kicking out the following error
SELinux: Could not downgrade policy file /etc/selinux/targeted/policy/policy.30, searching for an older version.
SELinux: Could not open policy file <= /etc/selinux/targeted/policy/policy.30: No such file or directory
libsemanage.semanage_reload_policy: load_policy returned error code 2. (No such file or directory).
SELinux: Could not downgrade policy file /etc/selinux/targeted/policy/policy.30, searching for an older version.
SELinux: Could not open policy file <= /etc/selinux/targeted/policy/policy.30: No such file or directory
/sbin/load_policy: Can't load policy: No such file or directory
libsemanage.semanage_reload_policy: load_policy returned error code 2. (No such file or directory).
OSError: No such file or directory
Im running a cloud storage on this server and what to get rid of the default port 22 before I start throwing work on it :(
any ideas ?
ssh centos7 selinux
asked Sep 21 '17 at 19:33
Jim VennerJim Venner
12
I'm running centos 7.3 with LAMP
After changing my ssh port in /etc/ssh/sshd_config I have run
semanage port -a -t ssh_port_t -p tcp <my port>
But its kicking out the following error
SELinux: Could not downgrade policy file /etc/selinux/targeted/policy/policy.30, searching for an older version.
SELinux: Could not open policy file <= /etc/selinux/targeted/policy/policy.30: No such file or directory
libsemanage.semanage_reload_policy: load_policy returned error code 2. (No such file or directory).
SELinux: Could not downgrade policy file /etc/selinux/targeted/policy/policy.30, searching for an older version.
SELinux: Could not open policy file <= /etc/selinux/targeted/policy/policy.30: No such file or directory
/sbin/load_policy: Can't load policy: No such file or directory
libsemanage.semanage_reload_policy: load_policy returned error code 2. (No such file or directory).
OSError: No such file or directory
Im running a cloud storage on this server and what to get rid of the default port 22 before I start throwing work on it :(
any ideas ?
ssh centos7 selinux
ssh centos7 selinux
asked Sep 21 '17 at 19:33
Jim VennerJim Venner
12
asked Sep 21 '17 at 19:33
Jim VennerJim Venner
12
asked Sep 21 '17 at 19:33
Jim VennerJim Venner
12
asked Sep 21 '17 at 19:33
Jim VennerJim Venner
12
asked Sep 21 '17 at 19:33
Jim VennerJim Venner
12
12
1
What isSELinuxstatus ?$ sestatus
– krisFR
Sep 21 '17 at 20:15
@krisFR sestatus reports it to be disabled but in the config it's set to enforcing?
– Jim Venner
Sep 22 '17 at 8:06
My guess is you get this error message because SELinux is disabled sosemanagekicks you out. If SELinux is set toenforcingin the config file, then maybe the change was made in the file but not applied by rebooting the server.
– krisFR
Sep 22 '17 at 8:18
Thanks for the reply @krisFR A reboot of the server however still shows it to be disabled with the config saying its set to enforcing. I have checked that the symlink is in place and it is with both /etc/sysconfig/selinux and /etc/selinux/config reporting the same. I look at cat /proc/cmdline shows no reference to selinux so it's not a kernel thing.
– Jim Venner
Sep 22 '17 at 8:44
1
hmm you may miss the packageselinux-policy-targeted, check if it is installed on your system, and if not, try to install it.
– krisFR
Sep 22 '17 at 9:53
|
show 4 more comments
1
What isSELinuxstatus ?$ sestatus
– krisFR
Sep 21 '17 at 20:15
@krisFR sestatus reports it to be disabled but in the config it's set to enforcing?
– Jim Venner
Sep 22 '17 at 8:06
My guess is you get this error message because SELinux is disabled sosemanagekicks you out. If SELinux is set toenforcingin the config file, then maybe the change was made in the file but not applied by rebooting the server.
– krisFR
Sep 22 '17 at 8:18
Thanks for the reply @krisFR A reboot of the server however still shows it to be disabled with the config saying its set to enforcing. I have checked that the symlink is in place and it is with both /etc/sysconfig/selinux and /etc/selinux/config reporting the same. I look at cat /proc/cmdline shows no reference to selinux so it's not a kernel thing.
– Jim Venner
Sep 22 '17 at 8:44
1
hmm you may miss the packageselinux-policy-targeted, check if it is installed on your system, and if not, try to install it.
– krisFR
Sep 22 '17 at 9:53
1
1
What is
SELinux status ? $ sestatus– krisFR
Sep 21 '17 at 20:15
What is
SELinux status ? $ sestatus– krisFR
Sep 21 '17 at 20:15
@krisFR sestatus reports it to be disabled but in the config it's set to enforcing?
– Jim Venner
Sep 22 '17 at 8:06
@krisFR sestatus reports it to be disabled but in the config it's set to enforcing?
– Jim Venner
Sep 22 '17 at 8:06
My guess is you get this error message because SELinux is disabled so
semanage kicks you out. If SELinux is set to enforcing in the config file, then maybe the change was made in the file but not applied by rebooting the server.– krisFR
Sep 22 '17 at 8:18
My guess is you get this error message because SELinux is disabled so
semanage kicks you out. If SELinux is set to enforcing in the config file, then maybe the change was made in the file but not applied by rebooting the server.– krisFR
Sep 22 '17 at 8:18
Thanks for the reply @krisFR A reboot of the server however still shows it to be disabled with the config saying its set to enforcing. I have checked that the symlink is in place and it is with both /etc/sysconfig/selinux and /etc/selinux/config reporting the same. I look at cat /proc/cmdline shows no reference to selinux so it's not a kernel thing.
– Jim Venner
Sep 22 '17 at 8:44
Thanks for the reply @krisFR A reboot of the server however still shows it to be disabled with the config saying its set to enforcing. I have checked that the symlink is in place and it is with both /etc/sysconfig/selinux and /etc/selinux/config reporting the same. I look at cat /proc/cmdline shows no reference to selinux so it's not a kernel thing.
– Jim Venner
Sep 22 '17 at 8:44
1
1
hmm you may miss the package
selinux-policy-targeted, check if it is installed on your system, and if not, try to install it.– krisFR
Sep 22 '17 at 9:53
hmm you may miss the package
selinux-policy-targeted, check if it is installed on your system, and if not, try to install it.– krisFR
Sep 22 '17 at 9:53
|
show 4 more comments
1 Answer
1
active
oldest
votes
Ok on further investigation it would seem that the reason I am having this issue is because my particular build of centos 7 is maintained by scaleway, my vps company. Frustratingly they don't support SElinux so it's disabled in boot somehow.
There is some mention of the issue on the scaleway github for the centos image. It would seem there is someway of allowing it by changing to a fedora bootscript. I fear beyond my linux abilities !
So if you find your way here and your on a vps the runs custom images - that could be your issue :/
Edit:
In fact it was easy to change the boot script on scaleway -> https://www.scaleway.com/docs/bootscript-and-how-to-use-it/
SElinux now up and running :)
answered Sep 23 '17 at 9:47
Jim VennerJim Venner
12
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f874910%2fcentos-7-cant-change-ssh-port-selinux-policy-30-missing%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
Ok on further investigation it would seem that the reason I am having this issue is because my particular build of centos 7 is maintained by scaleway, my vps company. Frustratingly they don't support SElinux so it's disabled in boot somehow.
There is some mention of the issue on the scaleway github for the centos image. It would seem there is someway of allowing it by changing to a fedora bootscript. I fear beyond my linux abilities !
So if you find your way here and your on a vps the runs custom images - that could be your issue :/
Edit:
In fact it was easy to change the boot script on scaleway -> https://www.scaleway.com/docs/bootscript-and-how-to-use-it/
SElinux now up and running :)
answered Sep 23 '17 at 9:47
Jim VennerJim Venner
12
add a comment |
Ok on further investigation it would seem that the reason I am having this issue is because my particular build of centos 7 is maintained by scaleway, my vps company. Frustratingly they don't support SElinux so it's disabled in boot somehow.
There is some mention of the issue on the scaleway github for the centos image. It would seem there is someway of allowing it by changing to a fedora bootscript. I fear beyond my linux abilities !
So if you find your way here and your on a vps the runs custom images - that could be your issue :/
Edit:
In fact it was easy to change the boot script on scaleway -> https://www.scaleway.com/docs/bootscript-and-how-to-use-it/
SElinux now up and running :)
answered Sep 23 '17 at 9:47
Jim VennerJim Venner
12
add a comment |
Ok on further investigation it would seem that the reason I am having this issue is because my particular build of centos 7 is maintained by scaleway, my vps company. Frustratingly they don't support SElinux so it's disabled in boot somehow.
There is some mention of the issue on the scaleway github for the centos image. It would seem there is someway of allowing it by changing to a fedora bootscript. I fear beyond my linux abilities !
So if you find your way here and your on a vps the runs custom images - that could be your issue :/
Edit:
In fact it was easy to change the boot script on scaleway -> https://www.scaleway.com/docs/bootscript-and-how-to-use-it/
SElinux now up and running :)
answered Sep 23 '17 at 9:47
Jim VennerJim Venner
12
Ok on further investigation it would seem that the reason I am having this issue is because my particular build of centos 7 is maintained by scaleway, my vps company. Frustratingly they don't support SElinux so it's disabled in boot somehow.
There is some mention of the issue on the scaleway github for the centos image. It would seem there is someway of allowing it by changing to a fedora bootscript. I fear beyond my linux abilities !
So if you find your way here and your on a vps the runs custom images - that could be your issue :/
Edit:
In fact it was easy to change the boot script on scaleway -> https://www.scaleway.com/docs/bootscript-and-how-to-use-it/
SElinux now up and running :)
answered Sep 23 '17 at 9:47
Jim VennerJim Venner
12
edited Sep 23 '17 at 10:17
answered Sep 23 '17 at 9:47
Jim VennerJim Venner
12
answered Sep 23 '17 at 9:47
Jim VennerJim Venner
12
answered Sep 23 '17 at 9:47
Jim VennerJim Venner
12
12
add a comment |
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f874910%2fcentos-7-cant-change-ssh-port-selinux-policy-30-missing%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
1
What is
SELinuxstatus ?$ sestatus– krisFR
Sep 21 '17 at 20:15
@krisFR sestatus reports it to be disabled but in the config it's set to enforcing?
– Jim Venner
Sep 22 '17 at 8:06
My guess is you get this error message because SELinux is disabled so
semanagekicks you out. If SELinux is set toenforcingin the config file, then maybe the change was made in the file but not applied by rebooting the server.– krisFR
Sep 22 '17 at 8:18
Thanks for the reply @krisFR A reboot of the server however still shows it to be disabled with the config saying its set to enforcing. I have checked that the symlink is in place and it is with both /etc/sysconfig/selinux and /etc/selinux/config reporting the same. I look at cat /proc/cmdline shows no reference to selinux so it's not a kernel thing.
– Jim Venner
Sep 22 '17 at 8:44
1
hmm you may miss the package
selinux-policy-targeted, check if it is installed on your system, and if not, try to install it.– krisFR
Sep 22 '17 at 9:53