Description of problem:

jabber cannot talk to local installed postgres instance

Version-Release number of selected component (if applicable):

selinux-policy-3.13.1-102.el7_3.16.noarch

How reproducible:

Every time

Steps to Reproduce:

1. Install Jabberd from EPEL
2. Follow steps in https://omg.dje.li/2017/03/configuring-spacewalks-jabberd-to-use-a-postgresql-backend/ to configure jabber with postgres
3. Try to start jabberd and check audit.log

Actual results:

Service does not start

Expected results:

Service starts

Additional info:


Following custom Selinux policy fixes it:

[root@spacewalk ~]# cat bla-c2s-custom.te

module bla-c2s-custom 1.0;

require {
        type postgresql_port_t;
        type jabberd_t;
        type jabberd_router_t;
        class tcp_socket name_connect;
        class netlink_route_socket { bind create getattr nlmsg_read };
}

#============= jabberd_router_t ==============
allow jabberd_router_t postgresql_port_t:tcp_socket name_connect;

#============= jabberd_t ==============
allow jabberd_t postgresql_port_t:tcp_socket name_connect;
allow jabberd_t self:netlink_route_socket { bind create getattr nlmsg_read };