-
Notifications
You must be signed in to change notification settings - Fork 1.1k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Glustereventsd Default port change #2091
Conversation
Issue : The default port of glustereventsd is currently 24009 which is preventing glustereventsd from binding to the UDP port due to selinux policies. Fix: Changing the default port to be bound by chanding it to something in the ephemeral range. Fixes: gluster#2080 Change-Id: Ibdc87f83f82f69660dca95d6d14b226e10d8bd33 Signed-off-by: srijan-sivakumar <ssivakum@redhat.com>
/run regression |
@@ -1,5 +1,5 @@ | |||
{ | |||
"log-level": "INFO", | |||
"port": 24009, | |||
"port": 55555, | |||
"disable-events-log": false | |||
} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This file will not be replaced on upgrade. Documentation is required to update this Port.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Ack. I'll send out a patch for handling the option in glusterdocs.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Is it not possible to update selinux policy to allow this Port?(Like other ports used by Gluster)
I've checked that option of modifying the selinux policy in glusterfs-selinux but the only way is to set the boolean Now that is an option which cannot be enabled as it'd be equivalent to opening ports itself ( not exactly, but it does increase the attack vector ). Hence the approach to change the default port. |
/run regression |
2 similar comments
/run regression |
/run regression |
/run regression |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
@aravindavk , @mohit84 could you please review the code. TIA. |
Issue : The default port of glustereventsd is currently 24009 which is preventing glustereventsd from binding to the UDP port due to selinux policies. Fix: Changing the default port to be bound by chanding it to something in the ephemeral range. >Fixes: gluster#2080 >Change-Id: Ibdc87f83f82f69660dca95d6d14b226e10d8bd33 >Signed-off-by: srijan-sivakumar <ssivakum@redhat.com> >Reviewed upstream on: gluster#2091 >Cherry-pick from commit: 2572f09 Change-Id: Ibdc87f83f82f69660dca95d6d14b226e10d8bd33 Reviewed upstream on: gluster#2091 Signed-off-by: Shwetha K Acharya <sacharya@redhat.com>
Issue : The default port of glustereventsd is currently 24009 which is preventing glustereventsd from binding to the UDP port due to selinux policies. Fix: Changing the default port to be bound by chanding it to something in the ephemeral range. >Fixes: #2080 >Change-Id: Ibdc87f83f82f69660dca95d6d14b226e10d8bd33 >Signed-off-by: srijan-sivakumar <ssivakum@redhat.com> >Reviewed upstream on: #2091 >Cherry-pick from commit: 2572f09 Change-Id: Ibdc87f83f82f69660dca95d6d14b226e10d8bd33 Reviewed upstream on: #2091 Signed-off-by: Shwetha K Acharya <sacharya@redhat.com> Co-authored-by: schaffung <ssivakum@redhat.com>
Issue : The default port of glustereventsd is currently 24009 which is preventing glustereventsd from binding to the UDP port due to selinux policies. Fix: Changing the default port to be bound by chanding it to something in the ephemeral range. >Fixes: gluster#2080 >Change-Id: Ibdc87f83f82f69660dca95d6d14b226e10d8bd33 >Signed-off-by: srijan-sivakumar <ssivakum@redhat.com> Upstream Patch : gluster#2091 BUG: 1814744 Change-Id: Ibdc87f83f82f69660dca95d6d14b226e10d8bd33 Signed-off-by: srijan-sivakumar <ssivakum@redhat.com> Reviewed-on: https://code.engineering.redhat.com/gerrit/227249 Tested-by: RHGS Build Bot <nigelb@redhat.com> Reviewed-by: Sunil Kumar Heggodu Gopala Acharya <sheggodu@redhat.com>
Issue : The default port of glustereventsd is currently 24009
which is preventing glustereventsd from binding to the UDP port
due to selinux policies.
Fix: Changing the default port to be bound by chanding it to something
in the ephemeral range.
Fixes: #2080
Change-Id: Ibdc87f83f82f69660dca95d6d14b226e10d8bd33
Signed-off-by: srijan-sivakumar ssivakum@redhat.com