Selinux policy for beanstalkd

[Ruben Kerkhof]

On Jan 18, 2010, at 7:38 PM, Miroslav Grepl wrote:

> # FIXME: we need a beanstalkd_port (tcp, 11300) in core policy
> corenet_tcp_bind_all_unreserved_ports(beanstalkd_t)
>
> Just for information, there is a workaround for this. You can add   
> the following statements to your beanstalkd local policy :
>
> ----
>
> type beanstalkd_port_t;
> corenet_port(beanstalkd_port_t)
>
> allow beanstalkd_t beanstalkd_port_t:tcp_socket name_bind;
>
> ---
>
> Then compile and load your policy module and execute:
>
> # semanage port -a -t beanstalkd_port_t -p tcp 11300

Thanks, I'll give it a try.

Once my module is finished, what's the best way to get this in selinux- 
policy?
Provide a patch agains refpolicy.git from Tresys, or against Fedora  
rawhide cvs?

Ruben