Resolves: #714240 - rebuild for fastrack etc/xinetd.d/tftp, and is disabled by default. TFTP provides very little security, and should not beĮnabled unless it is expressly needed. Server for TFTP, which allows users to transfer files to and from a The Trivial File Transfer Protocol (TFTP) is normally used only forīooting diskless workstations. Summary: The server for the Trivial File Transfer Protocol (TFTP) Command firewall-cmd –reload is needed every time changing the firewall 6 RPM for x86_64 From Valut Centos Where the –permanent option is used to permanently enable the TFTP port. # firewall-cmd –zone=public –add-service=tftp –permanent Then restart firewalld using command firewall-cmd –reload.Ī more standard way to allow TFTP is to use firewall-cmd command: A INPUT -m state –state NEW -m udp -p udp -m udp –dport 69 -j ACCEPT If the TFTP write is off as shown above, enable it with setsebool command:Ībove changes to SELinux are permanent, so no need to change any SELinux config files any more.Īllow TFTP services, following line should be added to /etc/sysconfig/iptables Then check the tftp permissions in SELinux: Then reboot the system, and check SELinux status: # minimum – Modification of targeted policy. # targeted – Targeted processes are protected, # SELINUXTYPE= can take one of three two values: # disabled – No SELinux policy is loaded. # permissive – SELinux prints warnings instead of enforcing. # enforcing – SELinux security policy is enforced.
# SELINUX= can take one of these three values: # This file controls the state of SELinux on the system. To make any change to SELinux, first modify /etc/selinux/config and change the policy to permissive: By default, the SELinux uses enforcing policy, which does not accept any change. So the TFTP read and write must be allowed in SELinux. In RHEL 7.0/CentOS 7, the SELinux is not supposed to be disabled(the system will abort booting if you disable SELinux). Home]# systemctl enable home]# systemctl enable home]# systemctl start home]# systemctl start tftpĪfter these two commands, permanent links will be made for xinetd and TFTP services.
0 kommentar(er)
