Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Glustereventsd Default port change #2091

Merged
merged 1 commit into from
Feb 10, 2021
Merged

Conversation

schaffung
Copy link
Member

Issue : The default port of glustereventsd is currently 24009
which is preventing glustereventsd from binding to the UDP port
due to selinux policies.

Fix: Changing the default port to be bound by chanding it to something
in the ephemeral range.

Fixes: #2080
Change-Id: Ibdc87f83f82f69660dca95d6d14b226e10d8bd33
Signed-off-by: srijan-sivakumar ssivakum@redhat.com

Issue : The default port of glustereventsd is currently 24009
which is preventing glustereventsd from binding to the UDP port
due to selinux policies.

Fix: Changing the default port to be bound by chanding it to something
in the ephemeral range.

Fixes: gluster#2080
Change-Id: Ibdc87f83f82f69660dca95d6d14b226e10d8bd33
Signed-off-by: srijan-sivakumar <ssivakum@redhat.com>
@schaffung
Copy link
Member Author

/run regression

@@ -1,5 +1,5 @@
{
"log-level": "INFO",
"port": 24009,
"port": 55555,
"disable-events-log": false
}
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This file will not be replaced on upgrade. Documentation is required to update this Port.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ack. I'll send out a patch for handling the option in glusterdocs.

Copy link
Member

@aravindavk aravindavk left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is it not possible to update selinux policy to allow this Port?(Like other ports used by Gluster)

@schaffung
Copy link
Member Author

I've checked that option of modifying the selinux policy in glusterfs-selinux but the only way is to set the boolean nis_enabled.

Now that is an option which cannot be enabled as it'd be equivalent to opening ports itself ( not exactly, but it does increase the attack vector ).

Hence the approach to change the default port.

@schaffung
Copy link
Member Author

/run regression

2 similar comments
@schaffung
Copy link
Member Author

/run regression

@deepshikhaaa
Copy link
Member

/run regression

@schaffung schaffung self-assigned this Feb 2, 2021
@schaffung
Copy link
Member Author

/run regression

Copy link
Contributor

@Shwetha-Acharya Shwetha-Acharya left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@schaffung
Copy link
Member Author

@aravindavk , @mohit84 could you please review the code. TIA.

@mohit84 mohit84 merged commit 2572f09 into gluster:devel Feb 10, 2021
Shwetha-Acharya pushed a commit to Shwetha-Acharya/glusterfs that referenced this pull request Feb 4, 2022
Issue : The default port of glustereventsd is currently 24009
which is preventing glustereventsd from binding to the UDP port
due to selinux policies.

Fix: Changing the default port to be bound by chanding it to something
in the ephemeral range.

>Fixes: gluster#2080
>Change-Id: Ibdc87f83f82f69660dca95d6d14b226e10d8bd33
>Signed-off-by: srijan-sivakumar <ssivakum@redhat.com>
>Reviewed upstream on: gluster#2091
>Cherry-pick from commit: 2572f09

Change-Id: Ibdc87f83f82f69660dca95d6d14b226e10d8bd33
Reviewed upstream on: gluster#2091
Signed-off-by: Shwetha K Acharya <sacharya@redhat.com>
Shwetha-Acharya added a commit that referenced this pull request Mar 9, 2022
Issue : The default port of glustereventsd is currently 24009
which is preventing glustereventsd from binding to the UDP port
due to selinux policies.

Fix: Changing the default port to be bound by chanding it to something
in the ephemeral range.

>Fixes: #2080
>Change-Id: Ibdc87f83f82f69660dca95d6d14b226e10d8bd33
>Signed-off-by: srijan-sivakumar <ssivakum@redhat.com>
>Reviewed upstream on: #2091
>Cherry-pick from commit: 2572f09

Change-Id: Ibdc87f83f82f69660dca95d6d14b226e10d8bd33
Reviewed upstream on: #2091
Signed-off-by: Shwetha K Acharya <sacharya@redhat.com>

Co-authored-by: schaffung <ssivakum@redhat.com>
csabahenk pushed a commit to csabahenk/glusterfs that referenced this pull request Mar 7, 2023
Issue : The default port of glustereventsd is currently 24009
which is preventing glustereventsd from binding to the UDP port
due to selinux policies.

Fix: Changing the default port to be bound by chanding it to something
in the ephemeral range.

>Fixes: gluster#2080
>Change-Id: Ibdc87f83f82f69660dca95d6d14b226e10d8bd33
>Signed-off-by: srijan-sivakumar <ssivakum@redhat.com>
Upstream Patch : gluster#2091

BUG: 1814744
Change-Id: Ibdc87f83f82f69660dca95d6d14b226e10d8bd33
Signed-off-by: srijan-sivakumar <ssivakum@redhat.com>
Reviewed-on: https://code.engineering.redhat.com/gerrit/227249
Tested-by: RHGS Build Bot <nigelb@redhat.com>
Reviewed-by: Sunil Kumar Heggodu Gopala Acharya <sheggodu@redhat.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Glustereventsd default port
5 participants