[Bug 219972] Review Request: poker-network - A poker server, client and abstract user interface library

[bugzilla at redhat.com]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: Review Request: poker-network - A poker server, client and abstract user interface library
Alias: poker-network

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=219972





------- Additional Comments From wart at kobold.org  2007-01-21 14:31 EST -------
(In reply to comment #45)
> (In reply to comment #42)
> > Two other issues that I've discovered while trying to run the server:
> > 
> > - Attempting to create a new user account through the poker-web interface fails.
> >  The web interface returns a cryptic string "type = 121, code = 1, message =",
> > and attempts to log in using the new account fail.
> 
> I cannot reproduce this error here.  Can you try again with the new -10 release
> package? And with selinux disabled?  I'll show it to upstream and see if they
> have any ideas.

Problem found:  There is a minimum limit of 5 characters for usernames.  This
error should be reported more clearly in the web interface.

> > - If selinux is enabled, then the web interface can't communicate with the
> > poker-server backend.  From the avc denial message, this appears to be because
> > the web interface wants to establish a TCP connection to the poker server (port
> > 19382), which is disallowed by the standard httpd policy.
> > 
> > Jan 20 22:20:52 localhost kernel: audit(1169360452.415:4): avc:  denied  {
> > name_connect } for  pid=2460 comm="httpd" dest=19382
> > scontext=user_u:system_r:httpd_t:s0 tcontext=system_u:object_r:port_t:s0
> > tclass=tcp_socket
> > 
> 
> From the poker-server README.Fedora file:
> 
> poker-server uses the following IP ports:
> 19380 default
> 19381 is for SSL
> 19382 is for XMLRPC
> 18383 is for XMLRPC over SSL
> 
> So, do we need to add selinux policy rules for these ports?  In my initial
> release I had something in the init scripts which I copied from one of your
> packages, but it was insufficient because you need to make a policy file too
> which I do not know how to do.  Should I try to contact so selinux guys to try
> and fix this for me?

I've passed this along to the fedora-selinux-list to ask for suggestions.

-- 
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug, or are watching the QA contact.