From: "P. Harlow" <wolf-r1@wispertel.net>
To: netfilter@lists.netfilter.org
Subject: IPTables not starting with Fedora 6
Date: Thu, 07 Dec 2006 17:51:31 -0700 [thread overview]
Message-ID: <4578B713.8020406@wispertel.net> (raw)
This might be better posted to an SELinux list however I thought I'd
start here.
I have a fresh install of Fedora Core 6. All works well with IPTables
however when I try to get it started at boot I get the following SELinux
error:
type=AVC msg=audit(1165530432.263:80): avc: denied { read } for pid=2995
comm="iptables-restor" name="iptables" dev=dm-0 ino=11599885
scontext=user_u:system_r:iptables_t:s0
tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
type=SYSCALL msg=audit(1165530432.263:80): arch=40000003 syscall=5
success=no exit=-13 a0=bffb4f67 a1=0 a2=1b6 a3=927e008 items=0 ppid=2986
pid=2995 auid=501 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0
fsgid=0 tty=(none) comm="iptables-restor" exe="/sbin/iptables-restore"
subj=user_u:system_r:iptables_t:s0 key=(null)
No matter what I do the machine refuses to read that file. Even if I
re-create it manually. Has anyone run into this where iptables-restore
is not allowed to read this file?
next reply other threads:[~2006-12-08 0:51 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2006-12-08 0:51 P. Harlow [this message]
2006-12-08 10:19 ` IPTables not starting with Fedora 6 Jorge Augusto Senger
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4578B713.8020406@wispertel.net \
--to=wolf-r1@wispertel.net \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.