On 01/29/2013 02:12 PM, Matthew Miller wrote:
On Tue, Jan 29, 2013 at 01:34:59PM -0500, Daniel J Walsh wrote:
>> I'm migrating a CUPS print server from Ubuntu to RHEL6. Previously I had
>> CUPS configured to listen on port 80, 443 and 631. Now SELinux is
>> preventing CUPS from binding to ports 80 and 443. What would be the
>> recommended way to permit this in SELinux?
> Another option would be change the labels on those ports to cups ports, but
> this would break httpd if it was also looking to use those ports.
> # semanage port -m -t cups_port_t -p tcp 80
Given that replacing httpd with CUPS running their directly is the intended
use of the machine, that actually seems better -- if httpd breaks, *good*,
because it's not supposed to be there.
I think I'll go with this approach. Thanks for all the help!
Steve