Bug #5981: Passenger opens up udp port - SELinux - Foreman

Actions

Copy link

Bug #5981

closed

Passenger opens up udp port

Added by Lukas Zapletal almost 11 years ago. Updated over 9 years ago.

Status:

Closed

Priority:

Normal

Assignee:

Lukas Zapletal

Category:

Target version:

Difficulty:

Triaged:

Bugzilla link:

Pull request:

Fixed in Releases:

Found in Releases:

Red Hat JIRA:

Description

Staypuft installer:

# audit2why -wa
type=AVC msg=audit(1401197569.085:2565): avc:  denied  { name_bind } for  pid=9349 comm="ruby" src=17659 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=udp_socket

# audit2allow -R
corenet_udp_bind_generic_port(passenger_t)

We are re-testing to see if the port is random or not. Strange UDP port.

Related issues 1 (0 open — 1 closed)