On 11/8/18 3:57 PM, Ed Greshko wrote: > On 11/9/18 7:46 AM, Paul Smith wrote: >> Thanks, Ed. I did issue the command you recommend, but with no >> success. I guess the Permissive mode does not completely disable >> Selinux. > > Well, it would record the AVC but not act on it. It records it, but it acts on it as well as if permissive wasn't set. I've hit it. I bitched to the SELinux people long ago. They didn't want to hear it. > So, if selinux were the problem it > should have connected. Again, in my experience permissive mode does not stop SELinux from blocking certain network activities, including some pipe operations. > If you want to totally disable selinux you can reboot and at the kernel selection screen > type "e" to edit and add "selinux=0" to the kernel parameters. This is temporary and will > not be retained on the next reboot. > > If you do this, you should issue "sudo fixfiles onboot" before you reboot and allow > selinux to be enabled. The reason being that any files created or changed may no longer > have a valid selinux context. If disabling SELinux fixes the connection issue, I'd sure-as-tootin' file a bugzilla about it. Make sure you include the conditions you hit as well as all the AVC denials. It might be an SELinux policy issue, it might be an issue with the strongswan or stroke programs themselves. Dunno. I suspect this is one of the "corner cases" that doesn't get strongly tested in the release process. ---------------------------------------------------------------------- - Rick Stevens, Systems Engineer, AllDigital ricks@xxxxxxxxxxxxxx - - AIM/Skype: therps2 ICQ: 226437340 Yahoo: origrps2 - - - - Real Time, adj.: Here and now, as opposed to fake time, which only - - occurs there and then - ---------------------------------------------------------------------- _______________________________________________ users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx
