diff options
author | Stefano Brivio <sbrivio@redhat.com> | 2023-03-08 13:21:19 +0100 |
---|---|---|
committer | Stefano Brivio <sbrivio@redhat.com> | 2023-03-09 03:44:21 +0100 |
commit | bb2b67cb3549ea2509f5b7b88790e08d2e362351 (patch) | |
tree | 7d3f3cf8138b4dd1c5af1e382a103dbafab1bb92 /contrib/selinux/pasta.te | |
parent | 5aea2f88ab5f63f01885109a4afb1271607fc06b (diff) | |
download | passt-bb2b67cb3549ea2509f5b7b88790e08d2e362351.tar passt-bb2b67cb3549ea2509f5b7b88790e08d2e362351.tar.gz passt-bb2b67cb3549ea2509f5b7b88790e08d2e362351.tar.bz2 passt-bb2b67cb3549ea2509f5b7b88790e08d2e362351.tar.lz passt-bb2b67cb3549ea2509f5b7b88790e08d2e362351.tar.xz passt-bb2b67cb3549ea2509f5b7b88790e08d2e362351.tar.zst passt-bb2b67cb3549ea2509f5b7b88790e08d2e362351.zip |
conf: Terminate on EMFILE or ENFILE on sockets for port mapping
In general, we don't terminate or report failures if we fail to bind
to some ports out of a given port range specifier, to allow users to
conveniently specify big port ranges (or "all") without having to
care about ports that might already be in use.
However, running out of the open file descriptors quota is a
different story: we can't do what the user requested in a very
substantial way.
For example, if the user specifies '-t all' and we can only bind
1024 sockets, the behaviour is rather unexpected.
Fail whenever socket creation returns -ENFILE or -EMFILE.
Link: https://bugs.passt.top/show_bug.cgi?id=27
Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
Reviewed-by: David Gibson <david@gibson.dropbear.id.au>
Diffstat (limited to 'contrib/selinux/pasta.te')
0 files changed, 0 insertions, 0 deletions