Fix SELinux Enforced Mode Preventing SSH Connection on Rocky Linux 8.10

In this article, we will discuss how to establish an SSH connection on Rocky Linux 8.10 when SELinux is enforcing mode.

Prerequisites

Before we begin, ensure that the following prerequisites are met:

1. Rocky Linux 8.10 is installed and booted.
2. The SSH server is installed and running on the Rocky Linux 8.10 system.
3. The user account you are trying to connect with has a password set.

Troubleshooting SSH Connection on Rocky Linux 8.10 with SELinux Enforcing Mode

When trying to establish an SSH connection on Rocky Linux 8.10 with SELinux enforcing mode, you might encounter issues. To troubleshoot this, follow these steps:

1. First, try to connect using the following command:

ssh -l admin logadmin

Replace admin with the username and logadmin with the password you are trying to use for the SSH connection.

2. If the connection fails, it's likely due to SELinux denying the SSH connection. To check the SELinux logs, run:

sudo journalctl -xe

Look for lines that indicate SSH connection denials. They should look similar to the following:

sshd[3234]: SELinux prevention: sshd(3234): user_tty_req_port access forbidden (32768:sshd) (uid=0e:u:system_u:sshd_t:s0-s0:c0.c1023)

3. To allow SSH connections, modify the SELinux context for the SSH daemon. Run the following command:

sudo semanage port -a -t ssh_port_t -p tcp 22

4. After modifying the SELinux context, restart the SSH service:

sudo systemctl restart sshd

5. Now, try to connect again using the ssh command from step 1.

If the connection still fails, you may need to adjust additional SELinux settings. Consult the Rocky Linux documentation or seek help from the community for further assistance.

Summary

In this article, we discussed how to troubleshoot an SSH connection on Rocky Linux 8.10 when SELinux is enforcing mode. We covered the steps to check the SELinux logs, modify the SELinux context for the SSH daemon, and restart the SSH service. By following these steps, you should be able to establish an SSH connection on Rocky Linux 8.10 with SELinux enforcing mode.

References

1. Rocky Linux Documentation: SELinux
2. Red Hat Enterprise Linux Documentation: Troubleshooting SSH Access with SELinux
3. CentOS Linux Documentation: SELinux Troubleshooting Guide