16.1 [sshd]: can not bind address service won't start

English Network/Internet
1
  • No sshd port bind at boot
Jul 13 13:46:16 sirius.dezordi.world sshd[3065]: error: Bind to port 889 on 0.0.0.0 failed: Permission denied.
Jul 13 13:46:16 sirius.dezordi.world sshd[3065]: error: Bind to port 889 on :: failed: Permission denied.

Any clues ?
The sshd_config file is the same I used for more than 8 years…

2

selinux?

As root:

ausearch -m AVC,USER_AVC,SELINUX_ERR,USER_SELINUX_ERR -ts recent

and

journalctl -t setroubleshoot
3 
sirius:/etc # ausearch -m AVC,USER_AVC,SELINUX_ERR,USER_SELINUX_ERR -ts recent
<no matches>

Jul 13 13:42:25 sirius.dezordi.world sshd[1508]: error: Bind to port 889 on 0.0.0.0 failed: Permission denied.
Jul 13 13:42:25 sirius.dezordi.world sshd[1508]: error: Bind to port 889 on :: failed: Permission denied.
Jul 13 13:42:25 sirius.dezordi.world sshd[1508]: fatal: Cannot bind any address.
Jul 13 13:46:16 sirius.dezordi.world sshd[3065]: error: Bind to port 889 on 0.0.0.0 failed: Permission denied.
Jul 13 13:46:16 sirius.dezordi.world sshd[3065]: error: Bind to port 889 on :: failed: Permission denied.
Jul 13 13:46:16 sirius.dezordi.world sshd[3065]: fatal: Cannot bind any address.
4

Have you defined a sshd Port below 1024:
as root:
grep -i port /etc/ssh/sshd_config

5

and

journalctl -xeu sshd.service
6

Yes it is likely SELinux. There are some audit entries that would be expected to flood the log file that they are suppressed.

Anyway, the SELinux policy by default is not going to allow a non-standard port. You can configure SELinux to know what port you want it to run on with

semanage port -a -t ssh_port_t -p tcp 889

and then restart sshd.

8

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.