Please fill in the following information:

Section Id: selinux-auditing-ge ** 

Issue description:

step 1.8 fails to start httpd IF chapter 3 nbde exercises have been done.

error starting httpd is

(13)Permission denied: AH00072: make_sock: could not bind to address 0.0.0.0:80 

and SELinux message show

avc: denied { name_bind } for pid=10818 comm="httpd" src=80 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:tangd_port_t:s0 tclass=tcp_socket permissive=0

Note the tangd_port_t for port 80.

This is a residual of the nbde_server role. Bug is actually in lab finish luks-review and lab finish luks-nbde.

The roles used in these exercises add tangd_port_t to port 80 and the finish script does not remove that mapping.  It removes the tangd packages but needs to also run semanage port -d -t tangd_port_t -p tcp 80

This impacts finish scripts for luks-review cleanup of server[cd] AND luks-nbde cleanup of server[bcd] it breaks selinux-auditing (serverc) and selinux-review (serverd) when those exercises try to start httpd service. (multiple students reported this in class today) 

Steps to reproduce:

Perform chapter 3 nbde exercises, then attempt ch08s06.