| Summary: | netstat -M problem | ||
|---|---|---|---|
| Product: | [Retired] Red Hat Linux | Reporter: | Steve Wills <steve> |
| Component: | distribution | Assignee: | Jeff Johnson <jbj> |
| Status: | CLOSED CURRENTRELEASE | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | 5.2 | CC: | jbj, why_99 |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | i386 | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 1998-12-06 03:10:20 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
|
Description
Steve Wills
1998-11-18 17:56:00 UTC
Enabled HAVE_FW_MASQUERADE in dist-6.0/net-tools-1.48-1. SELinux is preventing the /usr/sbin/dovecot (dovecot_t) from binding to port
10143.
Detailed Description
SELinux has denied the /usr/sbin/dovecot from binding to a network port
10143 which does not have an SELinux type associated with it. If
/usr/sbin/dovecot is supposed to be allowed to listen on this port, you can
use the semanage command to add this port to a inetd_child_port_t type. If
you think this is the default please file a
http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against the selinux-policy
package. If /usr/sbin/dovecot is not supposed to bind to this port, this
could signal a intrusion attempt.
Allowing Access
If you want to allow /usr/sbin/dovecot to bind to this port semanage port -a
-t inetd_child_port_t -p PROTOCOL 10143 Where PROTOCOL is tcp or udp.
i am redhat 5 ,and postfix mail,I try allowing:
semanage port -a -t inetd_child_port_t -p PROTOCOL 10143 Where PROTOCOL is tcp
or
semanage port -a -t inetd_child_port_t -p PROTOCOL 10143 Where PROTOCOL is udp
but it isn't suport for the command
what's wrong?
how can I do it ?
thank you!
answer to my mail:why_99@qq.com
|