General Information

This page covers the Network Services objectives, specifically for <service-name>.

Network Services Objectives

• Install the packages needed to provide the service
• Configure SELinux to support the service
• Use SELinux port labeling to allow services to use non-standard ports
• Configure the service to start when the system is booted
• Configure the service for basic operation
• Configure host-based and user-based security for the service

Install the service

yum install mariadb mariadb-server

• mariadb → the client
• mariadb-server → the server

• Service agnostic → Ensure SELinux is running and enabled (RHCSA objective).

Configuring the mariadb service with a non standard port and allowing port access with selinux.

• Examples: “man semanage-port” has examples for allowing non-standard ports
• Tip: To see current port labels

  semanage port -l | grep mariadb

Edit the main config file

vim /etc/my.cnf
 
port = 5502

• port number selected randomly

Open the firewall to the new port

firewall-cmd --permanent --add-port=5502/tcp
firewall-cmd --reload

SELinux: Allow mariadb to use the new port

semanage port -a -t mysqld_port_t 5502 -p tcp

Restart the service

systemctl restart mariadb

Check Current Service Status

systemctl status <service-name>

• Also displays if the service is enabled or disabled

Enabling a service to start on boot

systemctl enable <service-name>

Enable and Start the service

systemctl enable <service-name>
systemctl start <service-name>

Allow access through the firewall

firewall-cmd --permanent --add-service=<service-name>
firewall-cmd --reload