Port definitions in a policy module
by Jeff Sheltren
Is it possible to assign additional ports to an already-defined port type
in a loadable module? Basically I'm looking for a way to do the equivalent
of
'semanage port -a -t memcache_port_t -p tcp 11212'
for some set of ports, without having to run the semanage command --
instead storing the definitions in a module file.
I came across some post from 2007 claiming that 'portcon' (which I think
would be the way to do this) isn't supported in policy modules "(yet)", so
I'm wondering if something has changed, or if there is any other way to
implement this without the direct call to the semanage command.
The big picture is this: I would like to be able to leverage
the httpd_can_network_memcache boolean, allowing httpd (php) to connect to
multiple pre-defined memcache ports, without having to allow full network
access from httpd.
Thanks,
Jeff
10 years, 5 months
- 2
- 1
cloud-init blocked from installing rpm with scripts -- f19 issue still with us
by Matthew Miller
Please see https://bugzilla.redhat.com/show_bug.cgi?id=990910
This is a pretty serious problem -- people need to be able to install
packages via cloud-init.
--
Matthew Miller ☁☁☁ Fedora Cloud Architect ☁☁☁ <mattdm(a)fedoraproject.org>
10 years, 5 months
- 3
- 7