linux redhat 7 ( or centos 7 ) + firewalld mask the firewall
Clash Royale CLAN TAG#URR8PPP
up vote
0
down vote
favorite
I want to block the user to start the firewall on Linux machines
so I want to use mask on servers as the following:
systemctl mask firewalld
regarding that, I have few questions.
I see that when mask the firewall service its creates a symbolic link of the firewall.service to /dev/null, thus disabling the service.
So where is the location of the service that point to /dev/null (Path of the service that point to /dev/null)?
second
Masking the firewall is nice option to block users to start the firewall service, but as all know user can do unmask and then start the service.
Any advice on if we have other strong option from mask?
linux rhel iptables firewall services
edited Nov 29 '17 at 15:36
Vlastimil
6,4411147119
asked Nov 29 '17 at 12:46
yael
2,0301145
add a comment |Â
up vote
0
down vote
favorite
I want to block the user to start the firewall on Linux machines
so I want to use mask on servers as the following:
systemctl mask firewalld
regarding that, I have few questions.
I see that when mask the firewall service its creates a symbolic link of the firewall.service to /dev/null, thus disabling the service.
So where is the location of the service that point to /dev/null (Path of the service that point to /dev/null)?
second
Masking the firewall is nice option to block users to start the firewall service, but as all know user can do unmask and then start the service.
Any advice on if we have other strong option from mask?
linux rhel iptables firewall services
edited Nov 29 '17 at 15:36
Vlastimil
6,4411147119
asked Nov 29 '17 at 12:46
yael
2,0301145
Quick & effective post optimization checklist. I think it would be useful for you.
– peterh
Nov 29 '17 at 15:07
add a comment |Â
up vote
0
down vote
favorite
up vote
0
down vote
favorite
I want to block the user to start the firewall on Linux machines
so I want to use mask on servers as the following:
systemctl mask firewalld
regarding that, I have few questions.
I see that when mask the firewall service its creates a symbolic link of the firewall.service to /dev/null, thus disabling the service.
So where is the location of the service that point to /dev/null (Path of the service that point to /dev/null)?
second
Masking the firewall is nice option to block users to start the firewall service, but as all know user can do unmask and then start the service.
Any advice on if we have other strong option from mask?
linux rhel iptables firewall services
edited Nov 29 '17 at 15:36
Vlastimil
6,4411147119
asked Nov 29 '17 at 12:46
yael
2,0301145
I want to block the user to start the firewall on Linux machines
so I want to use mask on servers as the following:
systemctl mask firewalld
regarding that, I have few questions.
I see that when mask the firewall service its creates a symbolic link of the firewall.service to /dev/null, thus disabling the service.
So where is the location of the service that point to /dev/null (Path of the service that point to /dev/null)?
second
Masking the firewall is nice option to block users to start the firewall service, but as all know user can do unmask and then start the service.
Any advice on if we have other strong option from mask?
linux rhel iptables firewall services
edited Nov 29 '17 at 15:36
Vlastimil
6,4411147119
asked Nov 29 '17 at 12:46
yael
2,0301145
edited Nov 29 '17 at 15:36
Vlastimil
6,4411147119
edited Nov 29 '17 at 15:36
Vlastimil
6,4411147119
edited Nov 29 '17 at 15:36
Vlastimil
6,4411147119
6,4411147119
asked Nov 29 '17 at 12:46
yael
2,0301145
asked Nov 29 '17 at 12:46
yael
2,0301145
asked Nov 29 '17 at 12:46
yael
2,0301145
2,0301145
Quick & effective post optimization checklist. I think it would be useful for you.
– peterh
Nov 29 '17 at 15:07
add a comment |Â
Quick & effective post optimization checklist. I think it would be useful for you.
– peterh
Nov 29 '17 at 15:07
Quick & effective post optimization checklist. I think it would be useful for you.
– peterh
Nov 29 '17 at 15:07
Quick & effective post optimization checklist. I think it would be useful for you.
– peterh
Nov 29 '17 at 15:07
add a comment |Â
1 Answer
1
active
oldest
votes
up vote
2
down vote
accepted
As I understand the question, the users you are talking about have root access (since they can unmask a service). In this case there's nothing you can do. If you want your users not to enable a service, don't give them privileged access.
About your first point, the firewalld service is defined in /usr/lib/systemd/system/firewalld.service.
answered Nov 29 '17 at 12:53
dr01
15.3k114769
so what about the location of the service that point to /dev/null ( PATH of the service that point to /dev/null )
– yael
Nov 29 '17 at 13:01
I answered in the post above. If it helped you please consider accepting the answer. This will mark your question as solved for future readers, and will also prevent closure & deletion of your question.
– dr01
Nov 30 '17 at 16:03
add a comment |Â
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
up vote
2
down vote
accepted
As I understand the question, the users you are talking about have root access (since they can unmask a service). In this case there's nothing you can do. If you want your users not to enable a service, don't give them privileged access.
About your first point, the firewalld service is defined in /usr/lib/systemd/system/firewalld.service.
answered Nov 29 '17 at 12:53
dr01
15.3k114769
so what about the location of the service that point to /dev/null ( PATH of the service that point to /dev/null )
– yael
Nov 29 '17 at 13:01
I answered in the post above. If it helped you please consider accepting the answer. This will mark your question as solved for future readers, and will also prevent closure & deletion of your question.
– dr01
Nov 30 '17 at 16:03
add a comment |Â
up vote
2
down vote
accepted
As I understand the question, the users you are talking about have root access (since they can unmask a service). In this case there's nothing you can do. If you want your users not to enable a service, don't give them privileged access.
About your first point, the firewalld service is defined in /usr/lib/systemd/system/firewalld.service.
answered Nov 29 '17 at 12:53
dr01
15.3k114769
so what about the location of the service that point to /dev/null ( PATH of the service that point to /dev/null )
– yael
Nov 29 '17 at 13:01
I answered in the post above. If it helped you please consider accepting the answer. This will mark your question as solved for future readers, and will also prevent closure & deletion of your question.
– dr01
Nov 30 '17 at 16:03
add a comment |Â
up vote
2
down vote
accepted
up vote
2
down vote
accepted
As I understand the question, the users you are talking about have root access (since they can unmask a service). In this case there's nothing you can do. If you want your users not to enable a service, don't give them privileged access.
About your first point, the firewalld service is defined in /usr/lib/systemd/system/firewalld.service.
answered Nov 29 '17 at 12:53
dr01
15.3k114769
As I understand the question, the users you are talking about have root access (since they can unmask a service). In this case there's nothing you can do. If you want your users not to enable a service, don't give them privileged access.
About your first point, the firewalld service is defined in /usr/lib/systemd/system/firewalld.service.
answered Nov 29 '17 at 12:53
dr01
15.3k114769
edited Nov 29 '17 at 13:48
answered Nov 29 '17 at 12:53
dr01
15.3k114769
answered Nov 29 '17 at 12:53
dr01
15.3k114769
answered Nov 29 '17 at 12:53
dr01
15.3k114769
15.3k114769
so what about the location of the service that point to /dev/null ( PATH of the service that point to /dev/null )
– yael
Nov 29 '17 at 13:01
I answered in the post above. If it helped you please consider accepting the answer. This will mark your question as solved for future readers, and will also prevent closure & deletion of your question.
– dr01
Nov 30 '17 at 16:03
add a comment |Â
so what about the location of the service that point to /dev/null ( PATH of the service that point to /dev/null )
– yael
Nov 29 '17 at 13:01
I answered in the post above. If it helped you please consider accepting the answer. This will mark your question as solved for future readers, and will also prevent closure & deletion of your question.
– dr01
Nov 30 '17 at 16:03
so what about the location of the service that point to /dev/null ( PATH of the service that point to /dev/null )
– yael
Nov 29 '17 at 13:01
so what about the location of the service that point to /dev/null ( PATH of the service that point to /dev/null )
– yael
Nov 29 '17 at 13:01
I answered in the post above. If it helped you please consider accepting the answer. This will mark your question as solved for future readers, and will also prevent closure & deletion of your question.
– dr01
Nov 30 '17 at 16:03
I answered in the post above. If it helped you please consider accepting the answer. This will mark your question as solved for future readers, and will also prevent closure & deletion of your question.
– dr01
Nov 30 '17 at 16:03
add a comment |Â
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f407734%2flinux-redhat-7-or-centos-7-firewalld-mask-the-firewall%23new-answer', 'question_page');
);
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Quick & effective post optimization checklist. I think it would be useful for you.
– peterh
Nov 29 '17 at 15:07