Open Stack

Hi all,
Thanks for your responds.


I try to running # sudo semanage port -l|grep 5000 in my envrionment and get same infomation.
>> ...
>> commplex_main_port_t tcp 5000
>> commplex_main_port_t udp 5000
then, I wanna remove this port(5000) from SELinux policy rules list use this command(semanage port -d -p tcp -t commplex_port_t 5000),
the console echo is "/usr/sbin/semanage: Port tcp/5000 is defined in policy, cannot be deleted", and 'udp/5000' is same reply.
Some sounds[1] say, this port is declared in the corenetwork source policy which is compiled in the base module.
So, Have to recompile selinux module?




Thanks.
Joe.


[1]
http://www.redhat.com/archives/fedora-selinux-list/2009-September/msg00056.html








>> Another problem with port 5000 in Fedora, and probably more recent
>> versions of RHEL, is the selinux policy:
>>  
>> # sudo semanage port -l|grep 5000
>> ...
>> commplex_main_port_t tcp 5000
>> commplex_main_port_t udp 5000
>>  
>> There is some service called "commplex" that has already "claimed" port
>> 5000 for its use, at least as far as selinux goes.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20140717/4d1462d1/attachment.html>