ssh 修改埠號 --centos 7
1 vim /etc/ssh/sshd_config
Port XXXXX
#XXXXX 為要修改的埠號,預設是22,直接在新的行新增Port XXXXX即可。
2 systemctl restart sshd
常見問題,修改後重啟失敗
1 執行提示 journalctl -xe
SELinux is preventing /usr/sbin/httpd from name_bind access on the tcp_socket port XXX
執行 semanage port -a -t ssh_port_t -p tcp XXXXX
---如果提示XXXXX 已經存在了
執行
semanage port -m -t ssh_port_t -p tcp XXXXX
-a 是新增,-m 是修改。
#XXXXX 為要新增的埠號。
新增時如果提示如下:
libsemanage.semanage_get_lock: Could not get direct read lock at /etc/selinux/targeted/semanage.read.LOCK. (Resource temporarily unavailable).
libsemanage.enter_ro: could not get the active lock (Resource temporarily unavailable).
libsemanage.enter_ro: could not enter read-only section (Resource temporarily unavailable).
執行
mv /etc/selinux/targeted/semanage.trans.LOCK /etc/selinux/targeted/semanage.trans.LOCK.back
如果提示如下
libsemanage.semanage_get_lock: Could not get direct read lock at /etc/selinux/targeted/semanage.read.LOCK. (Resource temporarily unavailable).
libsemanage.enter_ro: could not get the active lock (Resource temporarily unavailable).
libsemanage.enter_ro: could not enter read-only section (Resource temporarily unavailable).
mv /etc/selinux/targeted/semanage.read.LOCK /etc/selinux/targeted/semanage.read.LOCK2
再次執行 semanage port -a -t ssh_port_t -p tcp XXXXX
semanage port -l |grep XXXXX
如果新增成功,重啟sshd就可以了。