Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-145214

Missing proto 'sctp' and 'dccp'

Linking RHIVOS CVEs to...Migration: Automation ...Sync from "Extern...XMLWordPrintable

    • rhel-system-roles-1.120.2-0.1.el10
    • Low
    • rhel-system-roles
    • 0
    • Dev ack
    • False
    • False
    • Hide

      None

      Show
      None
    • Yes
    • Red Hat Enterprise Linux
    • None
    • Requested
    • None
    • Enhancement
    • Hide
      Enhancement: Support for DCCP and SCTP protocols

      Reason: SELinux port management should support all available network protocols

      Result: Users can now manage SELinux port types for dccp and sctp protocols
      Show
      Enhancement: Support for DCCP and SCTP protocols Reason: SELinux port management should support all available network protocols Result: Users can now manage SELinux port types for dccp and sctp protocols
    • Proposed
    • Unspecified
    • Unspecified
    • Unspecified
    • None

      Hi

      On Suse SLES 16, I get this error while I let run the role [ansible-ha_cluster-main](https://github.com/SUSE/ansible-ha_cluster):

      ```
      TASK [fedora.linux_system_roles.selinux : Set an SELinux label on a port] ********************************************************************************************************************
      [ERROR]: Task failed: Module failed: value of proto must be one of: tcp, udp, got: sctp
      Origin: /home/ansible/ivo/git.data/iccs/ansible.labor/collections/ansible_collections/fedora/linux_system_roles/roles/selinux/tasks/main.yml:134:3

      132 loop_var: __selinux_item
      133
      134 - name: Set an SELinux label on a port
      ^ column 3

      failed: [myhost.local] (item=

      {'ports': '21064', 'proto': 'sctp', 'setype': 'cluster_port_t', 'state': 'present', 'local': True}

      ) => {"__selinux_item":

      {"local": true, "ports": "21064", "proto": "sctp", "setype": "cluster_port _t", "state": "present"}

      , "ansible_loop_var": "__selinux_item", "changed": false, "msg": "value of proto must be one of: tcp, udp, got: sctp"}

      ```
      After I added "sctp" [here](https://github.com/linux-system-roles/selinux/blob/141256f9eaff63b0c7c002a29f04930a7570727c/library/local_seport.py#L290), it worked.

      sctp was extracted from this output:

      ```
      myhost.local# firewall-cmd --info-service=high-availability
      high-availability
      ports: 3121/tcp 5403/tcp 5404/udp 5405-5412/udp 7630/tcp 9929/tcp 9929/udp 21064/tcp 21064/sctp 30865/tcp 7410/udp 7788-7789/tcp
      protocols:
      source-ports:
      modules:
      destination:
      includes:
      helpers:
      ```

      Thanks a lot

      Ivo

              rmeggins@redhat.com Richard Megginson
              rmeggins@redhat.com Richard Megginson
              Richard Megginson Richard Megginson
              David Jez David Jez
              Zuzana Fantini Zoubkova Zuzana Fantini Zoubkova
              Votes:
              0 Vote for this issue
              Watchers:
              10 Start watching this issue

                Created:
                Updated: