On Jan 18, 2010, at 7:38 PM, Miroslav Grepl wrote:
# FIXME: we need a beanstalkd_port (tcp, 11300) in core policy
corenet_tcp_bind_all_unreserved_ports(beanstalkd_t)
Just for information, there is a workaround for this. You can add
the following statements to your beanstalkd local policy :
----
type beanstalkd_port_t;
corenet_port(beanstalkd_port_t)
allow beanstalkd_t beanstalkd_port_t:tcp_socket name_bind;
---
Then compile and load your policy module and execute:
# semanage port -a -t beanstalkd_port_t -p tcp 11300
Thanks, I'll give it a try.
Once my module is finished, what's the best way to get this in selinux-
policy?
Provide a patch agains refpolicy.git from Tresys, or against Fedora
rawhide cvs?
Ruben