Hi!
I wanted vsftpd to listen on 750 or 777 port. SELinux does not like this
type=AVC msg=audit(1141840161.184:107): avc: denied { name_bind } for pid=5352 comm="vsftpd" src=777 scontext=root:system_r:ftpd_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket type=AVC msg=audit(1141840470.444:114): avc: denied { name_bind } for pid=5495 comm="vsftpd" src=750 scontext=root:system_r:ftpd_t tcontext=system_u:object_r:kerberos_port_t tclass=tcp_socket
I've downloaded selinux-policy-targeted-sources rpm and wanted to add this line:
portcon tcp 750 system_u:object_r:ftp_port_t
The problem is that I don't know where should it be placed. It does not work in domains/misc/local.te -- `make load' fails ;-)
OS: FC4 selinux-policy-targeted-sources: 1.27.1-2.22
Regards, Dawid