Page 159 - RHEL8 BOOK

run below command to change SELinux context
semanage port -a -t ssh_port_t -p tcp 1028

Log authentication related logs to log file, If you hash out the SyslogFacility authentication related
messages will not be logged
# Logging
# obsoletes QuietMode and FascistLogging
#SyslogFacility AUTH
SyslogFacility AUTHPRIV
#LogLevel INFO

Permit Root Login via SSH.
Permit root login from SSH you have to un-comment below config line (by default root is allowed). If
you would like to deny root login via SSH instead of ‘yes’ write ‘no’
#PermitRootLogin yes

Enabling Key Based authentication, remote host keys would be added to required file.
Customization can be done by specifying below parameter in config file
AuthorizedKeysFile .ssh/authorized_keys

GUI windows access using SSH, Enable X11forwarding so that you can run GUI window on remote
host from SSH
X11Forwarding yes

Banner Message when user logged in to server using SSH, user will see an banner message. To
specify Banner message enable below config line
Banner /filepath

Allow to ssh only particular group members
AllowGroups groupname

S. Pradhan
(MCA, MBA-IT, BCA, CCNA, MCSA 2012, RHCE, ETHICAL HACKING)
Email Id:-spradhan.iiht@gmail.com
159