Quantcast
Viewing all articles
Browse latest Browse all 20

FAPOLICYD in RHEL8.6 - Blocking SSHD

### I disabled FIPS mode and rebooted.
### I set fapolicyd to permissive mode.
### I made three three rules:

echo 'allow perm=any dir=execdirs : all trust=0' > /etc/fapolicyd/rules.d/80-my-rules.rules
echo 'allow perm=any dir=systemdirs : all trust=0' >> /etc/fapolicyd/rules.d/80-my-rules.rules
echo 'deny_syslog perm=any all : all' >> /etc/fapolicyd/rules.d/80-my-rules.rules

### I restarted services
fapolicyd-cli --update
systemctl restart fapolicyd

### watching logs
tail -f...

Read more

Viewing all articles
Browse latest Browse all 20

Trending Articles