1. 程式人生 > 其它 >ssh 修改埠號 --centos 7

ssh 修改埠號 --centos 7

1 vim /etc/ssh/sshd_config

Port   XXXXX

#XXXXX 為要修改的埠號,預設是22,直接在新的行新增Port   XXXXX即可。

2 systemctl restart sshd

常見問題,修改後重啟失敗

1 執行提示 journalctl -xe

SELinux is preventing /usr/sbin/httpd from name_bind access on the tcp_socket port XXX

執行  semanage port -a -t ssh_port_t -p tcp XXXXX 

---如果提示XXXXX 已經存在了

執行

semanage port -m -t ssh_port_t -p tcp XXXXX

-a 是新增,-m 是修改。

#XXXXX 為要新增的埠號。

新增時如果提示如下:

libsemanage.semanage_get_lock: Could not get direct read lock at /etc/selinux/targeted/semanage.read.LOCK. (Resource temporarily unavailable).
libsemanage.enter_ro: could not get the active lock (Resource temporarily unavailable).
libsemanage.enter_ro: could not enter read-only section (Resource temporarily unavailable).

執行

mv /etc/selinux/targeted/semanage.trans.LOCK /etc/selinux/targeted/semanage.trans.LOCK.back

如果提示如下

libsemanage.semanage_get_lock: Could not get direct read lock at /etc/selinux/targeted/semanage.read.LOCK. (Resource temporarily unavailable).
libsemanage.enter_ro: could not get the active lock (Resource temporarily unavailable).
libsemanage.enter_ro: could not enter read-only section (Resource temporarily unavailable).

mv /etc/selinux/targeted/semanage.read.LOCK /etc/selinux/targeted/semanage.read.LOCK2

再次執行  semanage port -a -t ssh_port_t -p tcp XXXXX 

semanage port -l |grep  XXXXX

如果新增成功,重啟sshd就可以了。