SELinux Error ValueError: Port already Defined

Today, I want to run the httpd server on a custom port, 8002 on a CentOS 7 server. Of course, all my system has SELinux in enforcing mode. In order for the httpd to bind on port 8002, we need to add this port to the httpd_port_t port type list. First let’s confirm that port 8002 is not yet in the http_port_t list: [root@servera ~]# semanage port -l | grep ^http http_cache_port_t tcp 8080, 8118, 8123, 10001-10010 http_cache_port_t udp 3130 http_port_t tcp 80, 81, 443, 488, 8008, 8009, 8443, 9000 We know from the manual semanage-port(8), to add a port to an SELinux port type list, we run the following command:...

July 27, 2020 · 2 min · 359 words · kenno

How to Install Ansible on Centos 8

On most Linux distribution, Ansible can be installed either using python3-pip or ansible package. I’m going to show how to get Ansible installed using the second method on CentOS 8. First add the EPEL repository to the CentOS 8 server. # yum localinstall https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm Next, install ansible package: # yum install ansible Last metadata expiration check: 0:00:49 ago on Sun 10 Nov 2019 09:33:22 PM AEDT. Dependencies resolved. ======================================================================================================================= Package Arch Version Repository Size ======================================================================================================================= Installing: ansible noarch 2....

November 9, 2019 · 2 min · 233 words · kenno

Connect to a WPA2-Enterprise Connection Using nmcli

This is like a re-post of a question from askubuntu.com. To get to that post, I usually had to google it. So, I’ll post it here so I know where to look for when I need it again. At work, we use WPA2-Enterprise for wireless connection. To create a new connection on my laptop with wlp3s0 as Wifi device, follow this step: That’s it if you know how to do it....

August 27, 2018 · 1 min · 81 words · kenno

How to Generate SELinux Policy Manual Page

It seems that by default, SELinux policy manpage is not available. Here’s how to make it available. First install selinux-policy-devel package Then generate the man page by running: # sepolicy manpage -a -p /usr/share/man/man8<br/> -a : all domains -p : path to store the manpage (by default it’s /tmp) /usr/share/man/man8 – section 8 of manpage is for system admin command Create or update manual page index caches # mandb Benefit...

August 26, 2018 · 1 min · 80 words · kenno

RHEL Recovering the Root Password

Early last year I started a blog post about the preparation for Red Hat Certified System Administrator (RHCSA) exam. My intention back then was to have more posts follow suit about the exam topics. Like many things in life, things don’t always go according to plan. That was the only post, but I passed the RHCSA exam. Today, I’m going to start another new post about the preparation for the Red Hat Certified System Engineer (RHCSE) exam....

August 12, 2018 · 2 min · 376 words · kenno