Security question

[Rick Stevens]

On Thu, 2006-01-05 at 13:26 -0500, Juan wrote:
>  -----Original Message-----
> From: redhat-install-list-bounces at redhat.com
> [mailto:redhat-install-list-bounces at redhat.com] On Behalf Of Rick Stevens
> Sent: Thursday, January 05, 2006 1:07 PM
> To: Getting started with Red Hat Linux
> Subject: Re: Security question
> 
> On Thu, 2006-01-05 at 09:33 -0500, Juan wrote:
> >  
> > Hi all.
> > I have FC4 installed.
> > I was trying to setup the firewall using the Desktop/Security level 
> > tab and I mistakenly closed some ports I need open.
> > When I realized my error I tried to get the setup screen again but now 
> > when I click on Security Level nothing happens.
> > Is there a way to recover the functionality of "Security Level"?
> > I had to disable iptables at the services screen in order to have this 
> > box usable but I am very concerned about its security.
> > Thanks in advance
> 
> Depending on which ports you closed, the security program may not be able to
> connect to your GUI.
> 
> Try running "system-config-securitylevel" as the root user.
> 
> ----------------------------------------------------------------------
> - Rick Stevens, Senior Systems Engineer     rstevens at vitalstream.com -
> - VitalStream, Inc.                       http://www.vitalstream.com -
> -                                                                    -
> -   "I was remembering the immortal words of Socrates when he said,  -
> -   'I drank what?'"                 -- Val Kilmer in "Real Genius"  -
> ----------------------------------------------------------------------
> Hi Rick.
> Thanks for your answer. I did it and got:
> 
> Traceback (most recent call last):
>   File
> "/usr/share/system-config-securitylevel/system-config-securitylevel.py" ,
> line 18, in ?
> 	app.stand_alone()
>   File "/usr/share/system-config-securitylevel/securitylevel.py" , line 453,
> in stand_alone
> 	self.readFile()
>   File "/usr/share/system-config-securitylevel/securitylevel.py" , line353,
> in readFile
> 	protoname=socket.getservbyport(int(service), protocol)
> socket.error: port/proto not found
> 
> Is there anything else I can do?

Note that the program must be run in a terminal window in the GUI.  If
you're doing it from a raw command line, try the text version of the
program:

	# system-config-securitylevel-tui

----------------------------------------------------------------------
- Rick Stevens, Senior Systems Engineer     rstevens at vitalstream.com -
- VitalStream, Inc.                       http://www.vitalstream.com -
-                                                                    -
-      We are born naked, wet and hungry. Then things get worse.     -
----------------------------------------------------------------------