Re: dhcp failover with selinux enabled

2019-11-03 Thread Bill Shirley
You can find out which ports are configured with: [0:root@c3po selinux]$ semanage port -l | grep dhcpd dhcpd_port_t   tcp  547, 548, 647, 847, 7911 dhcpd_port_t   udp  67, 547, 548, 647, 847 There are designated ports in /etc/services: dhcp-failover   647/t

Re: dhcp failover with selinux enabled

2019-11-02 Thread Ed Greshko
On 11/3/19 9:31 AM, Sam Varshavchik wrote: Does anyone happen to know if the dhcp failover configuration that's documented here: https://kb.isc.org/docs/aa-00502 is supported by Fedora's selinux policy. Perusing it, failover seems to use a dedicated port(s), so selinux needs to bless dhcp's bi

dhcp failover with selinux enabled

2019-11-02 Thread Sam Varshavchik
Does anyone happen to know if the dhcp failover configuration that's documented here: https://kb.isc.org/docs/aa-00502 is supported by Fedora's selinux policy. Perusing it, failover seems to use a dedicated port(s), so selinux needs to bless dhcp's binding to that port(s). I couldn't figure