On Tue, 2008-12-09 at 09:15 -0500, Doug Sikora wrote: > The below rules came from audit2allow, > > allow test_t inaddr_any_node_t:tcp_socket node_bind; > allow test_t inaddr_any_node_t:udp_socket node_bind; > > Instead of allowing "any_node" I would like to limit this to specific hosts and or networks. > > Does anyone know the syntax for this? Note that the check above is only dealing with binding to an address, not sending/receiving packets. Is binding what you want to limit to specific addresses? If so, you need to define types for the addresses (via local policy module) and map the addresses to those types (via semanage node). -- Stephen Smalley National Security Agency -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list
