On 08/18/2010 11:21 AM, Mr Dash Four wrote: > > There was a suggestion for change to tor.te a while ago as well (see > tor: dac_override, dac_read_search, name_bind and net_bind_service > thread) - the new version of tor (2.x) provides dns resolution as part > of the service it runs, so it needs to bind to udp/53 and the statement: > > corenet_udp_bind_dns_port(tor_t) It is best to report this to bugzilla.redhat.com in the selinux-policy component. Thanks in advance. > does the trick when it is included in tor.te. Currently I do this with > patching, but it would be nice to have it as part of the policy in a > similar way it was done with openvpn. >
Attachment:
signature.asc
Description: OpenPGP digital signature
-- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux
