Hello,
On Fri, Apr 27, 2018 at 4:31 PM, Stephen Smalley <sds@xxxxxxxxxxxxx> wrote:
See:
https://github.com/SELinuxProject/selinux-kernel/ issues/21
https://bugzilla.redhat.com/show_bug.cgi?id=1168044
OK. So currently, it's not possible to write a policy item which allows connections to sockets on the loopback interface only.
In that case, I'll work on a patch proposal for a boolean to activate this:
allow tomcat_t smtp_port_t:tcp_socket name_connect;
--
allow tomcat_t smtp_port_t:tcp_socket name_connect;
--
Regards,
Troels Arvin
Troels Arvin
