selinux December 2013

selinux@lists.fedoraproject.org

12 participants
12 discussions

Port definitions in a policy module
by Jeff Sheltren 03 Dec '13

03 Dec '13

Is it possible to assign additional ports to an already-defined port type in a loadable module? Basically I'm looking for a way to do the equivalent of 'semanage port -a -t memcache_port_t -p tcp 11212' for some set of ports, without having to run the semanage command -- instead storing the definitions in a module file. I came across some post from 2007 claiming that 'portcon' (which I think would be the way to do this) isn't supported in policy modules "(yet)", so I'm wondering if something has changed, or if there is any other way to implement this without the direct call to the semanage command. The big picture is this: I would like to be able to leverage the httpd_can_network_memcache boolean, allowing httpd (php) to connect to multiple pre-defined memcache ports, without having to allow full network access from httpd. Thanks, Jeff

2 1

cloud-init blocked from installing rpm with scripts -- f19 issue still with us
by Matthew Miller 02 Dec '13

02 Dec '13

Please see https://bugzilla.redhat.com/show_bug.cgi?id=990910 This is a pretty serious problem -- people need to be able to install packages via cloud-init. -- Matthew Miller ☁☁☁ Fedora Cloud Architect ☁☁☁ <mattdm(a)fedoraproject.org>

3 7

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

selinux December 2013