The new Tor Browser Bundle and Torbutton default to 9150 as the Tor SOCKSPort, so could this please be added to default selinux policy? The current workaround is: semanage port -a -t tor_socks_port_t -p tcp 9150 Package versions: selinux-policy-targeted-3.11.1-78.fc18
I have checked a fix for this into rawhide. e66a03a0774a527938f3b23e9a86c61f74570134
Excellent, thanks very much Dan. Just wondering, will F18 and F17 see this change too?
I see we have in the policy tor_socks_port_t tcp 9050
> I see we have in the policy > > tor_socks_port_t tcp 9050 Yes. I am proposing that both 9050 and 9150 are tor_socks_port_t, as both can reasonably be expected for use as Tor SOCKSPorts.
Ah, you are talking about 9150.
Just wanted to query again about if/when this might find it's way into F18? I appreciate that there may be some kind of staging period in rawhide, but I'd really like to see this isolated 2-line change on F18: --- a/policy-f18-base.patch +++ b/policy-f18-base.patch @@ -96491,7 +96491,7 @@ + + +Default Defined Ports: -+tcp 9050 ++tcp 9050,9150 +.EE +.SH "MANAGED FILES" + @@ -114722,7 +114722,7 @@ network_port(tftp, udp,69,s0) -network_port(tor, tcp, 6969, s0, tcp,9001,s0, tcp,9030,s0, tcp,9050,s0, tcp,9051,s0) +network_port(tor, tcp, 6969, s0, tcp,9001,s0, tcp,9030,s0, tcp,9051,s0) -+network_port(tor_socks, tcp,9050,s0) ++network_port(tor_socks, tcp,9050,s0, tcp,9150,s0) network_port(traceroute, udp,64000-64010,s0) +network_port(tram, tcp, 4567, s0) network_port(transproxy, tcp,8081,s0)
Patch added. commit 6e4575c899a0ab4bc6f7ee29567278e1b1398887 Author: Miroslav Grepl <mgrepl> Date: Wed Mar 20 08:07:36 2013 +0100 Add tcp/9150 as tor_socks_port
Great, thanks very much Miroslav :)
selinux-policy-3.11.1-87.fc18 has been submitted as an update for Fedora 18. https://admin.fedoraproject.org/updates/selinux-policy-3.11.1-87.fc18
Package selinux-policy-3.11.1-87.fc18: * should fix your issue, * was pushed to the Fedora 18 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing selinux-policy-3.11.1-87.fc18' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2013-4251/selinux-policy-3.11.1-87.fc18 then log in and leave karma (feedback).
selinux-policy-3.11.1-87.fc18 has been pushed to the Fedora 18 stable repository. If problems still persist, please make note of it in this bug report.