Re: [CentOS] SEmodule dependency hell.

2015-04-07 Thread Daniel J Walsh
You should be able to modify the definition of a port. Or create a new port type and modify the existing port to use it. http_port_t is just a name (type) that we can use to group a number of ports together. Sadly we do not separate the port types of incoming and outgoing connections. So if you

Re: [CentOS] SEmodule dependency hell.

2015-04-02 Thread Andrew Holway
File a bug!!! On 2 April 2015 at 16:20, James B. Byrne byrn...@harte-lyne.ca wrote: On Wed, April 1, 2015 16:09, Andrew Holway wrote: I used the command: semanage port -m -t http_port_t -p tcp 8000 to relabel a port. perhaps you could try: semanage port -m -t unconfined_t -p tcp 8000

Re: [CentOS] SEmodule dependency hell.

2015-04-02 Thread James B. Byrne
On Wed, April 1, 2015 16:09, Andrew Holway wrote: I used the command: semanage port -m -t http_port_t -p tcp 8000 to relabel a port. perhaps you could try: semanage port -m -t unconfined_t -p tcp 8000 Failing that; would it work to run your application in the httpd_t domain? I ended up

[CentOS] SEmodule dependency hell.

2015-04-01 Thread James B. Byrne
I want you all to see what I went through trying to simply reassign (unsuccessfully) the context of a well-known port. To the best of my ability to recall none of the packages mentioned below are even installed on the host in question. Why are these dependices preventing me from removing a

Re: [CentOS] SEmodule dependency hell.

2015-04-01 Thread Andrew Holway
I used the command: semanage port -m -t http_port_t -p tcp 8000 to relabel a port. perhaps you could try: semanage port -m -t unconfined_t -p tcp 8000 Failing that; would it work to run your application in the httpd_t domain? Ta, Andrew On 1 April 2015 at 18:23, James B. Byrne