< setenforce 0 > ?
P. Harlow escreveu:
> This might be better posted to an SELinux list however I thought I'd
> start here.
>
> I have a fresh install of Fedora Core 6. All works well with IPTables
> however when I try to get it started at boot I get the following SELinux
> error:
>
> type=AVC msg=audit(1165530432.263:80): avc: denied { read } for pid=2995
> comm="iptables-restor" name="iptables" dev=dm-0 ino=11599885
> scontext=user_u:system_r:iptables_t:s0
> tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
> type=SYSCALL msg=audit(1165530432.263:80): arch=40000003 syscall=5
> success=no exit=-13 a0=bffb4f67 a1=0 a2=1b6 a3=927e008 items=0 ppid=2986
> pid=2995 auid=501 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0
> fsgid=0 tty=(none) comm="iptables-restor" exe="/sbin/iptables-restore"
> subj=user_u:system_r:iptables_t:s0 key=(null)
>
> No matter what I do the machine refuses to read that file. Even if I
> re-create it manually. Has anyone run into this where iptables-restore
> is not allowed to read this file?
>
>
--
Atenciosamente,
Jorge Augusto Senger
BR10 Ltda - Gerência de TI
jorge@xxxxxxxxxxx
42 32252888 / 84015330
Attachment:
signature.asc
Description: OpenPGP digital signature
