VSFTPD listen port to 2121 doesn't raise SELINUX Alert

[benlimanto]

Hello, as the title stated, I'm trying to figure out why VSFTPD listen_port to 2121 even not allowed on SELINUX port context, still allowed to run and allowed to be connected by other people.

The system is enforced, using RHEL 9 (on RHA VM Labs, on rha.ole.redhat.com), with ftp_port_t only allow port 21 for FTP.

Could anyone enlight me, why this is allowed, as we know SELINUX is there to prevent that, but on this case it isn't. I've tested it to other services like HTTPD/Apache, SSHD, it will raise error when it use un normal port. Thank you

[EmanuelHaine]

@benlimanto 

Is there any message on /var/log/audit/audit.log regarding this?

Please, also check if is there any output after running this command: "semanage permissive -l"

[benlimanto]

There are none, last time I checked, it's on Virtual-Lab, I will try
again on Monday when I'm at Lab.

--
Regards,

Benyamin Limanto
sent from Fedora Linux Thunderbird on Thinkpad X220