Re: iptables denied by selinux

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Antonio Olivares wrote:
Dear all,

I have still yet to make the dhcpd server work because of selinux.  I have been patient, but I am getting frustrated :(

[olivares@localhost ~]$ dmesg | grep avc
type=1400 audit(1228956840.530:4): avc:  denied  { write } for  pid=1499 comm="ip6tables-resto" path="/0" dev=devpts ino=2 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:devpts_t:s0 tclass=chr_file
[olivares@localhost ~]$

I have already ran touch /.autorelabel; reboot and all of the other denials have been cleared but this one. I am not yet taking selinux off or getting that desparate, because when I booted in enforcing=0 mode for other troubles, the dhcpd server still did not work, but the iptables message was still there :(

Please advice me, I do not want to throw the towel yet!

Why do you think the DHCP server problem is SELinux related? The AVC here appears to be from starting the ip6tables service, and you say that the DCHP server still doesn't work in permissive mode...

What, if any, messages do you see in /var/log/messages from dhcpd?

Paul.

--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux