Fedora Account System
Red Hat Associate
Red Hat Customer
The new Tor Browser Bundle and Torbutton default to 9150 as the Tor SOCKSPort, so could this please be added to default selinux policy? The current workaround is: semanage port -a -t tor_socks_port_t -p tcp 9150 Package versions: selinux-policy-targeted-3.11.1-78.fc18
I have checked a fix for this into rawhide. e66a03a0774a527938f3b23e9a86c61f74570134
Excellent, thanks very much Dan. Just wondering, will F18 and F17 see this change too?
I see we have in the policy tor_socks_port_t tcp 9050
> I see we have in the policy > > tor_socks_port_t tcp 9050 Yes. I am proposing that both 9050 and 9150 are tor_socks_port_t, as both can reasonably be expected for use as Tor SOCKSPorts.
Ah, you are talking about 9150.
Just wanted to query again about if/when this might find it's way into F18? I appreciate that there may be some kind of staging period in rawhide, but I'd really like to see this isolated 2-line change on F18: --- a/policy-f18-base.patch +++ b/policy-f18-base.patch @@ -96491,7 +96491,7 @@ + + +Default Defined Ports: -+tcp 9050 ++tcp 9050,9150 +.EE +.SH "MANAGED FILES" + @@ -114722,7 +114722,7 @@ network_port(tftp, udp,69,s0) -network_port(tor, tcp, 6969, s0, tcp,9001,s0, tcp,9030,s0, tcp,9050,s0, tcp,9051,s0) +network_port(tor, tcp, 6969, s0, tcp,9001,s0, tcp,9030,s0, tcp,9051,s0) -+network_port(tor_socks, tcp,9050,s0) ++network_port(tor_socks, tcp,9050,s0, tcp,9150,s0) network_port(traceroute, udp,64000-64010,s0) +network_port(tram, tcp, 4567, s0) network_port(transproxy, tcp,8081,s0)
Patch added. commit 6e4575c899a0ab4bc6f7ee29567278e1b1398887 Author: Miroslav Grepl <mgrepl> Date: Wed Mar 20 08:07:36 2013 +0100 Add tcp/9150 as tor_socks_port
Great, thanks very much Miroslav :)
selinux-policy-3.11.1-87.fc18 has been submitted as an update for Fedora 18. https://admin.fedoraproject.org/updates/selinux-policy-3.11.1-87.fc18
Package selinux-policy-3.11.1-87.fc18: * should fix your issue, * was pushed to the Fedora 18 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing selinux-policy-3.11.1-87.fc18' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2013-4251/selinux-policy-3.11.1-87.fc18 then log in and leave karma (feedback).
selinux-policy-3.11.1-87.fc18 has been pushed to the Fedora 18 stable repository. If problems still persist, please make note of it in this bug report.