the typical way to allow something to bind to specific ports in selinux would be something like allow foo_t http_port_t : tcp_socket name_bind ; the bigge

the typical way to allow something to bind to specific ports in selinux would be something like allow foo_t http_port_t : tcp_socket name_bind ; the biggest problems are that you need to a) confine your users b) label everything