On Sat, Aug 12, 2023 at 6:08 PM François Patte <francois.patte@xxxxxxxxxxxxxxxxxxxx> wrote:
Bonjour,
I come accross a problem with nftables: it was impossible to start
nftables, the error message is:
internal:0:0-0: Error: Could not open file
"/etc/sysconfig/nftables.conf": Permission denied
This file /etc/sysconfig/nftables.conf has 755 permissions.
I tried to get informatons from the internet but did not find a
solution.
I tested wether it was a selinux problem and I won...
setenforce 0
solved the problem....
Now I went back to setenforce 1 but the problem is : if I reboot my
machine, the problem will come back.
How to make selinux accept nftables?
Hi,
The nftables service starts on my system without any issue. Are you aware of any customizations made on your system?
What do the following commands show?
restorecon -Rvn /etc/sysconfig/nftables.conf /etc/nftables /usr/sbin/nft
ausearch -i -m avc,user_avc,selinux_err,user_selinux_err -ts boot
fc36 nftables version 1.0.1
Thank you for helping.
--
François Patte
UFR de mathématiques et informatique
Laboratoire CNRS MAP5, UMR 8145
Université Paris Descartes
45, rue des Saints Pères
F-75270 Paris Cedex 06
Tél. +33 (0)6 7892 5822
http://www.math-info.univ-paris5.fr/~patte
FSF
https://www.fsf.org/blogs/community/presenting-shoetool-happy-holidays-from-the-fsf
_______________________________________________
users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
--
Zdenek Pytela
Security SELinux team
_______________________________________________ users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
