module synapse 1.0; require { type httpd_t; type unreserved_port_t; class tcp_socket name_bind; } #============= httpd_t ============== #!!!! This avc can be allowed using the boolean 'nis_enabled' allow httpd_t unreserved_port_t:tcp_socket name_bind;