On Jan 18, 2010, at 7:38 PM, Miroslav Grepl wrote: > # FIXME: we need a beanstalkd_port (tcp, 11300) in core policy > corenet_tcp_bind_all_unreserved_ports(beanstalkd_t) > > Just for information, there is a workaround for this. You can add > the following statements to your beanstalkd local policy : > > ---- > > type beanstalkd_port_t; > corenet_port(beanstalkd_port_t) > > allow beanstalkd_t beanstalkd_port_t:tcp_socket name_bind; > > --- > > Then compile and load your policy module and execute: > > # semanage port -a -t beanstalkd_port_t -p tcp 11300 Thanks, I'll give it a try. Once my module is finished, what's the best way to get this in selinux- policy? Provide a patch agains refpolicy.git from Tresys, or against Fedora rawhide cvs? Ruben -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux
