SELinux also controls access to your TCP/IP ports. If your application is confined by SELinux, it will also deny access to your ports when starting up the application.
This recipe will show you how to detect which ports are used by a particular SELinux type and change it.
Let's allow the HTTP daemon to listen on the nonstandard port 82 through the following steps:
First, look for the ports that are accessed by HTTP via these commands:
~# semanage port -l |grep http http_cache_port_t tcp 8080, 8118, 8123, 10001-10010 http_cache_port_t udp 3130 http_port_t tcp 80, 81, 443, 488, 8008, 8009, 8443, 9000 pegasus_http_port_t tcp 5988 pegasus_https_port_t tcp 5989 ~#
The SELinux port assignment we're looking for is
http_port_t. As you can see, only the displayed ports (80,81,443,488,8008,8009,8443, and9000) are allowed to be used to listen on by any process...