unreserved_port

All of lore.kernel.org
 help / color / mirror / Atom feed

* unreserved_port_t
@ 2021-03-03 10:26 Russell Coker
  2021-03-04 14:18 ` unreserved_port_t Dominick Grift
  0 siblings, 1 reply; 2+ messages in thread
From: Russell Coker @ 2021-03-03 10:26 UTC (permalink / raw)
  To: selinux-refpolicy

How are we supposed to write policy for programs that bind to random unused 
ports >1024?  There doesn't seem to be any macro that allows binging to 
unreserved_port_t except corenet_tcp_bind_all_unreserved_ports() which is too 
permissive.

-- 
My Main Blog         http://etbe.coker.com.au/
My Documents Blog    http://doc.coker.com.au/

^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: unreserved_port_t
  2021-03-03 10:26 unreserved_port_t Russell Coker
@ 2021-03-04 14:18 ` Dominick Grift
  0 siblings, 0 replies; 2+ messages in thread
From: Dominick Grift @ 2021-03-04 14:18 UTC (permalink / raw)
  To: Russell Coker; +Cc: selinux-refpolicy

Russell Coker <russell@coker.com.au> writes:

> How are we supposed to write policy for programs that bind to random unused 
> ports >1024?  There doesn't seem to be any macro that allows binging to 
> unreserved_port_t except corenet_tcp_bind_all_unreserved_ports() which is too 
> permissive.

Seems like corenet_tcp_bind_unreserved_ports() is currently missing. Please
add. There is a corenet_tcp_bind_reserved_ports().


-- 
gpg --locate-keys dominick.grift@defensec.nl
Key fingerprint = FCD2 3660 5D6B 9D27 7FC6  E0FF DA7E 521F 10F6 4098
https://sks-keyservers.net/pks/lookup?op=get&search=0xDA7E521F10F64098
Dominick Grift

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2021-03-04 14:20 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2021-03-03 10:26 unreserved_port_t Russell Coker
2021-03-04 14:18 ` unreserved_port_t Dominick Grift

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.