cookbooks/mu-master/files/default/dirsrv_admin.te
module dirsrv_admin 1.0;
require {
type httpd_t;
type unreserved_port_t;
class tcp_socket name_bind;
}
#============= httpd_t ==============
#!!!! This avc can be allowed using the boolean 'nis_enabled'
allow httpd_t unreserved_port_t:tcp_socket name_bind;