* unreserved_port_t
@ 2021-03-03 10:26 Russell Coker
2021-03-04 14:18 ` unreserved_port_t Dominick Grift
0 siblings, 1 reply; 2+ messages in thread
From: Russell Coker @ 2021-03-03 10:26 UTC (permalink / raw)
To: selinux-refpolicy
How are we supposed to write policy for programs that bind to random unused
ports >1024? There doesn't seem to be any macro that allows binging to
unreserved_port_t except corenet_tcp_bind_all_unreserved_ports() which is too
permissive.
--
My Main Blog http://etbe.coker.com.au/
My Documents Blog http://doc.coker.com.au/
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: unreserved_port_t
2021-03-03 10:26 unreserved_port_t Russell Coker
@ 2021-03-04 14:18 ` Dominick Grift
0 siblings, 0 replies; 2+ messages in thread
From: Dominick Grift @ 2021-03-04 14:18 UTC (permalink / raw)
To: Russell Coker; +Cc: selinux-refpolicy
Russell Coker <russell@coker.com.au> writes:
> How are we supposed to write policy for programs that bind to random unused
> ports >1024? There doesn't seem to be any macro that allows binging to
> unreserved_port_t except corenet_tcp_bind_all_unreserved_ports() which is too
> permissive.
Seems like corenet_tcp_bind_unreserved_ports() is currently missing. Please
add. There is a corenet_tcp_bind_reserved_ports().
--
gpg --locate-keys dominick.grift@defensec.nl
Key fingerprint = FCD2 3660 5D6B 9D27 7FC6 E0FF DA7E 521F 10F6 4098
https://sks-keyservers.net/pks/lookup?op=get&search=0xDA7E521F10F64098
Dominick Grift
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2021-03-04 14:20 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2021-03-03 10:26 unreserved_port_t Russell Coker
2021-03-04 14:18 ` unreserved_port_t Dominick Grift
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.