文件操作 - selinux-ssh.conf
返回文件管理
返回主菜单
删除本文件
文件: /fail2ban/config/filter.d/selinux-ssh.conf
编辑文件内容
# Fail2Ban configuration file for SELinux ssh authentication errors # [INCLUDES] after = selinux-common.conf [Definition] _type = USER_(ERR|AUTH) _uid = 0 _auid = \d+ _subj = (?:unconfined_u|system_u):system_r:sshd_t:s0-s0:c0\.c1023 _exe =/usr/sbin/sshd _terminal = ssh _anygrp = (?!acct=|exe=|addr=|terminal=|res=)\w+=(?:"[^"]+"|\S*) _msg = (?:%(_anygrp)s )*acct=(?:"<F-USER>[^"]+</F-USER>"|<F-ALT_USER>\S+</F-ALT_USER>) exe="%(_exe)s" (?:%(_anygrp)s )*addr=<ADDR> terminal=%(_terminal)s res=failed # DEV Notes: # # Note: USER_LOGIN is ignored as this is the duplicate messsage # ssh logs after 3 USER_AUTH failures. # # Author: Daniel Black
修改文件时间
将文件时间修改为当前时间的前一年
删除文件