Author here :)
I'm not aware of how selinux can solve this but I will look into it if only just to mention it as an alternative.
I'm not aware of how selinux can solve this but I will look into it if only just to mention it as an alternative.
allow foo_t http_port_t : tcp_socket name_bind ;