Skip to content

Conversation

@janlindstrom
Copy link

From downstream bug RHEL-116757, the use of ss to map all the usage of ports to pids and process names under selinux is rather limited by the mysqld_exec_t limitations.

The checking of the mapping is a bit excessive in a selinux environment where binding is limited.

We replace the use of ss under selinux to raw reading of the /proc/tcp{,} interfaces of the linux that aren't selinux restricted.

@janlindstrom janlindstrom self-assigned this Oct 21, 2025
@codership-jenkins
Copy link
Collaborator

Can one of the admins verify this patch?

5 similar comments
@codership-jenkins
Copy link
Collaborator

Can one of the admins verify this patch?

@codership-jenkins
Copy link
Collaborator

Can one of the admins verify this patch?

@codership-jenkins
Copy link
Collaborator

Can one of the admins verify this patch?

@codership-jenkins
Copy link
Collaborator

Can one of the admins verify this patch?

@codership-jenkins
Copy link
Collaborator

Can one of the admins verify this patch?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants