From ba4eef3bb1857bf8dedc6329ed815bfe382f2308 Mon Sep 17 00:00:00 2001
From: Mykola Solianko <mykola_solianko@epam.com>
Date: Fri, 27 Feb 2026 19:02:18 +0200
Subject: [PATCH] [rpc] Allow rpc_domain to bind unreserved ports (1024-65535)

Signed-off-by: Mykola Solianko <mykola_solianko@epam.com>
Reviewed-by: Mykola Kobets <mykola_kobets@epam.com>
Reviewed-by: Oleksandr Grytsov <oleksandr_grytsov@epam.com>
Reviewed-by: Mykhailo Lohvynenko <mykhailo_lohvynenko@epam.com>
---
 policy/modules/services/rpc.te | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/policy/modules/services/rpc.te b/policy/modules/services/rpc.te
index d43da694b7..fdf45cc036 100644
--- a/policy/modules/services/rpc.te
+++ b/policy/modules/services/rpc.te
@@ -118,6 +118,8 @@ corenet_tcp_bind_generic_port(rpc_domain)
 corenet_udp_bind_generic_port(rpc_domain)
 corenet_tcp_bind_all_rpc_ports(rpc_domain)
 corenet_udp_bind_all_rpc_ports(rpc_domain)
+corenet_tcp_bind_all_unreserved_ports(rpc_domain)
+corenet_udp_bind_all_unreserved_ports(rpc_domain)
 
 fs_rw_rpc_named_pipes(rpc_domain)
 fs_search_auto_mountpoints(rpc_domain)