Description of problem: any process (even unconfined_t!) cannot listen on SCTP port Version-Release number of selected component (if applicable): selinux-policy-targeted-2.4.6-302.el5 How reproducible: always Steps to Reproduce: 1. yum install lksctp-tools 2. sctp_darn -l -H 127.0.0.1 -P 1234 Actual results: sctp_darn: can not bind to 127.0.0.1:1234: Permission denied. Apr 19 10:30:24 rhel5 kernel: type=1400 audit(1303201824.942:23): avc: denied { name_bind } for pid=5187 comm="sctp_darn" src=1234 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=rawip_socket Expected results: sctp_darn listening...
I added a fix. We have this in RHEL6.
Fixed in selinux-policy-2.4.6-306.el5
(In reply to comment #1) > I added a fix. We have this in RHEL6. Can you please attach the fix to this bug? Thanks.
An advisory has been issued which should help the problem described in this bug report. This report is therefore being closed with a resolution of ERRATA. For more information on therefore solution and/or where to find the updated files, please follow the link below. You may reopen this bug report if the solution does not work for you. http://rhn.redhat.com/errata/RHBA-2011-1069.html