semanage-port

List all port labeling rules

$ sudo semanage port -l

$ sudo semanage port -l -C -n

$ sudo semanage port -a -t [ssh_port_t] -p [tcp] [22000]

$ sudo semanage port -a -t [http_port_t] -p [tcp] [80-88]

$ sudo semanage port -d -p [udp] [11940]

semanage port [-l|-a|-d|-m] [options] port

semanage port manages SELinux port type definitions. Port labels control which confined domains can bind to or connect to specific network ports.
When running a service on a non-standard port, you must add a port rule so SELinux allows the service to use that port. For example, running SSH on port 22000 requires adding that port to ssh_port_t.

-l, --list

List all port labeling rules

Add a new port rule

Delete a port rule

Modify an existing port rule

SELinux type to assign to the port

Protocol (tcp or udp)

Show only locally customized rules

Omit column headings from output

Requires root privileges. Port ranges are specified as start-end (e.g., 8080-8090). Changes take effect immediately. Use semanage port -l | grep to find existing port types for services.

semanage(8), ss(8), netstat(8), selinux(8)