[Bug 219972] Review Request: poker-network - A poker server, client and abstract user interface library

[bugzilla at redhat.com]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: Review Request: poker-network - A poker server, client and abstract user interface library
Alias: poker-network

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=219972





------- Additional Comments From chris.stone at gmail.com  2007-01-21 10:11 EST -------
(In reply to comment #42)
> Two other issues that I've discovered while trying to run the server:
> 
> - Attempting to create a new user account through the poker-web interface fails.
>  The web interface returns a cryptic string "type = 121, code = 1, message =",
> and attempts to log in using the new account fail.

I cannot reproduce this error here.  Can you try again with the new -10 release
package? And with selinux disabled?  I'll show it to upstream and see if they
have any ideas.


> 
> - If selinux is enabled, then the web interface can't communicate with the
> poker-server backend.  From the avc denial message, this appears to be because
> the web interface wants to establish a TCP connection to the poker server (port
> 19382), which is disallowed by the standard httpd policy.
> 
> Jan 20 22:20:52 localhost kernel: audit(1169360452.415:4): avc:  denied  {
> name_connect } for  pid=2460 comm="httpd" dest=19382
> scontext=user_u:system_r:httpd_t:s0 tcontext=system_u:object_r:port_t:s0
> tclass=tcp_socket
> 

>From the poker-server README.Fedora file:

poker-server uses the following IP ports:
19380 default
19381 is for SSL
19382 is for XMLRPC
18383 is for XMLRPC over SSL

So, do we need to add selinux policy rules for these ports?  In my initial
release I had something in the init scripts which I copied from one of your
packages, but it was insufficient because you need to make a policy file too
which I do not know how to do.  Should I try to contact so selinux guys to try
and fix this for me?

-- 
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug, or are watching the QA contact.