|

»

Fedora SELinux List

How to modify port by semanage

View: New views

3 Messages — Rating Filter: Alert me

	How to modify port by semanage by Shintaro Fujiwara-2 :: Rate this Message: Reply to Author \| View Threaded \| Show Only this Message Hi, please tell me modifying port by semanage. I could add and delete port ok, but don't know how to modify it. I read man but -m example was not there. Thanks in advance. -- http://intrajp.no-ip.com/ Home Page -- fedora-selinux-list mailing list fedora-selinux-list@... https://www.redhat.com/mailman/listinfo/fedora-selinux-list
	Re: How to modify port by semanage by Daniel J Walsh :: Rate this Message: Reply to Author \| View Threaded \| Show Only this Message -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Shintaro Fujiwara wrote: > Hi, please tell me modifying port by semanage. > > I could add and delete port ok, but don't know how to modify it. > > I read man but -m example was not there. > > Thanks in advance. > > > > ------------------------------------------------------------------------ > > -- > fedora-selinux-list mailing list > fedora-selinux-list@... > https://www.redhat.com/mailman/listinfo/fedora-selinux-list Ports are defined by the number and the type (udp/tcp) So # /usr/sbin/semanage port -a -t http_port_t -p udp 9999 # /usr/sbin/semanage port -m -t ntp_port_t -p udp 9999 # /usr/sbin/semanage port -m -t ntp_port_t -p tcp 9999 /usr/sbin/semanage: Port tcp/9999 is not defined You can change the type of a port but not the protocol. You would have to delete and add. You can also NOT change the default ports that come with policy, only ones that you add. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.8 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org iEYEARECAAYFAkegjjIACgkQrlYvE4MpobMCogCffC9/7z4P+ra7D0ePWWM5j7hX gIgAn15FEVz94RMaTEjWy9+stdhkMwEs =XwtQ -----END PGP SIGNATURE----- -- fedora-selinux-list mailing list fedora-selinux-list@... https://www.redhat.com/mailman/listinfo/fedora-selinux-list
	Re: How to modify port by semanage by Shintaro Fujiwara-2 :: Rate this Message: Reply to Author \| View Threaded \| Show Only this Message 2008/1/30, Daniel J Walsh <dwalsh@...>: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Shintaro Fujiwara wrote: > Hi, please tell me modifying port by semanage. > > I could add and delete port ok, but don't know how to modify it. > > I read man but -m example was not there. > > Thanks in advance. > > > > ------------------------------------------------------------------------ > > -- > fedora-selinux-list mailing list > fedora-selinux-list@... > https://www.redhat.com/mailman/listinfo/fedora-selinux-list Ports are defined by the number and the type (udp/tcp) So # /usr/sbin/semanage port -a -t http_port_t -p udp 9999 # /usr/sbin/semanage port -m -t ntp_port_t -p udp 9999 # /usr/sbin/semanage port -m -t ntp_port_t -p tcp 9999 /usr/sbin/semanage: Port tcp/9999 is not defined You can change the type of a port but not the protocol. You would have to delete and add. You can also NOT change the default ports that come with policy, only ones that you add. I didn't know that much. Thank you very much. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.8 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org iEYEARECAAYFAkegjjIACgkQrlYvE4MpobMCogCffC9/7z4P+ra7D0ePWWM5j7hX gIgAn15FEVz94RMaTEjWy9+stdhkMwEs =XwtQ -----END PGP SIGNATURE----- -- http://intrajp.no-ip.com/ Home Page -- fedora-selinux-list mailing list fedora-selinux-list@... https://www.redhat.com/mailman/listinfo/fedora-selinux-list