* Re: port numbers for sctp support? [not found] ` <20080422192552.GM7449@angus.ind.WPI.EDU> @ 2008-04-22 19:42 ` Daniel J Walsh 2008-04-22 20:02 ` Stephen Smalley 0 siblings, 1 reply; 2+ messages in thread From: Daniel J Walsh @ 2008-04-22 19:42 UTC (permalink / raw) To: fedora-selinux-list, SE Linux -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Chuck Anderson wrote: > On Tue, Apr 22, 2008 at 03:21:35PM -0400, Daniel J Walsh wrote: >> TCP Port 22 is labeled ssh_port_t. > > For TCP, yes. I need SCTP, a different IP protocol. > > -- > fedora-selinux-list mailing list > fedora-selinux-list@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-selinux-list I have no idea if this is handled SCTP Are you seeing AVC messages? You might want to bring this up for discussion on Developer list. <selinux@tycho.nsa.gov> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org iEYEARECAAYFAkgOP48ACgkQrlYvE4MpobNDdQCgsr4usMZttCbcaq+SyuMCHav1 H58AoJ+wWJqxTKvkbyq37/cGVryzah/F =ibh6 -----END PGP SIGNATURE----- -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. ^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: port numbers for sctp support? 2008-04-22 19:42 ` port numbers for sctp support? Daniel J Walsh @ 2008-04-22 20:02 ` Stephen Smalley 0 siblings, 0 replies; 2+ messages in thread From: Stephen Smalley @ 2008-04-22 20:02 UTC (permalink / raw) To: Daniel J Walsh; +Cc: fedora-selinux-list, SE Linux, Eric Paris, James Morris On Tue, 2008-04-22 at 15:42 -0400, Daniel J Walsh wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Chuck Anderson wrote: > > On Tue, Apr 22, 2008 at 03:21:35PM -0400, Daniel J Walsh wrote: > >> TCP Port 22 is labeled ssh_port_t. > > > > For TCP, yes. I need SCTP, a different IP protocol. > > > > -- > > fedora-selinux-list mailing list > > fedora-selinux-list@redhat.com > > https://www.redhat.com/mailman/listinfo/fedora-selinux-list > > I have no idea if this is handled SCTP Are you seeing AVC messages? Should show up as name_bind checks on port_t:rawip_socket, as per: http://marc.info/?l=fedora-selinux-list&m=112806295900352&w=2 Policy toolchain doesn't presently allow specification of port contexts for anything other than udp or tcp, although I think the kernel side would support it just fine. So we'd need to update libsepol/libsemanage first, then adjust seobject.py to recognize "sctp". Along with checkpolicy. -- Stephen Smalley National Security Agency -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. ^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2008-04-22 20:02 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
[not found] <20080422182103.GJ7449@angus.ind.WPI.EDU>
[not found] ` <480E3ABF.2020109@redhat.com>
[not found] ` <20080422192552.GM7449@angus.ind.WPI.EDU>
2008-04-22 19:42 ` port numbers for sctp support? Daniel J Walsh
2008-04-22 20:02 ` Stephen Smalley
This is an external index of several public inboxes, see mirroring instructions on how to clone and mirror all data and code used by this external index.