Timeline for Difference between SELinux booleans "httpd_can_network_relay" and "httpd_can_network_connect"
Current License: CC BY-SA 3.0
3 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Feb 26, 2017 at 3:09 | comment | added | user112461 |
Thanks for your answer. I find the part about the ports is not correct. It seems that httpd_can_network_connect allows any outgoing network connection. I switched it on and am able to connect to SFTP on an obscure random port that is certainly not in the list of ports for http_port_t. I don't know what that is for, but it's not this.
|
|
| Feb 26, 2017 at 3:05 | comment | added | user112461 | The information I had added about the types from audit2why was misinterpreted. I updated my question. | |
| Feb 26, 2017 at 1:32 | history | answered | enigma | CC BY-SA 3.0 |