Configure Firewall, SELinux, and SSH Settings

Describes the proper settings to configure your Firewall, SELINUX, and SSH when deploying Data Fabric on a hardened OS.

Hardened operating systems restrict network, file-system, and remote access by default. Configure the firewall, SELinux, and SSH on all nodes so that Data Fabric services can communicate and the installation can be completed.

Firewall settings

A firewall is a security system that controls network traffic, blocking unauthorized access while allowing legitimate communication.

  • Disable the Firewall or ensure that the required ports are enabled.

For more information, see Ports Used by HPE Data Fabric Software

SELinux

SELinux (Security-Enhanced Linux) is a security module built into the Linux kernel that provides Mandatory Access Control (MAC) to govern what actions processes and users can take on system resources.

  1. Disable SELinux and restart the host. 
    echo 0 > /selinux/enforce
  2. After restart, check the SELinux status and ensure it is disabled.
  3. Validate the SELinux configuration.
    zypper install policycoreutils
    sestatus

SSH Settings

SSH (Secure Shell) settings allow secure remote access to a system.
  1. Set Password Authentication in sshd_config on all Data Fabric nodes:
    • Edit /etc/ssh/sshd_config
    • Set PasswordAuthentication as yes
    • Set PermitRootLogin as yes
    • Restart the sshd service - systemctl restart sshd.service
  2. Set Swap on all nodes.
    sysctl vm.swappiness=1