IPTables not starting with Fedora 6

IPTables not starting with Fedora 6

[P. Harlow]

This might be better posted to an SELinux list however I thought I'd 
start here.

I have a fresh install of Fedora Core 6. All works well with IPTables 
however when I try to get it started at boot I get the following SELinux 
error:

type=AVC msg=audit(1165530432.263:80): avc: denied { read } for pid=2995 
comm="iptables-restor" name="iptables" dev=dm-0 ino=11599885 
scontext=user_u:system_r:iptables_t:s0 
tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
type=SYSCALL msg=audit(1165530432.263:80): arch=40000003 syscall=5 
success=no exit=-13 a0=bffb4f67 a1=0 a2=1b6 a3=927e008 items=0 ppid=2986 
pid=2995 auid=501 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 
fsgid=0 tty=(none) comm="iptables-restor" exe="/sbin/iptables-restore" 
subj=user_u:system_r:iptables_t:s0 key=(null)

No matter what I do the machine refuses to read that file. Even if I 
re-create it manually. Has anyone run into this where iptables-restore 
is not allowed to read this file?

Re: IPTables not starting with Fedora 6

[Jorge Augusto Senger]

[-- Attachment #1: Type: text/plain, Size: 1190 bytes --]

< setenforce 0 > ?

P. Harlow escreveu:
> This might be better posted to an SELinux list however I thought I'd
> start here.
> 
> I have a fresh install of Fedora Core 6. All works well with IPTables
> however when I try to get it started at boot I get the following SELinux
> error:
> 
> type=AVC msg=audit(1165530432.263:80): avc: denied { read } for pid=2995
> comm="iptables-restor" name="iptables" dev=dm-0 ino=11599885
> scontext=user_u:system_r:iptables_t:s0
> tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
> type=SYSCALL msg=audit(1165530432.263:80): arch=40000003 syscall=5
> success=no exit=-13 a0=bffb4f67 a1=0 a2=1b6 a3=927e008 items=0 ppid=2986
> pid=2995 auid=501 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0
> fsgid=0 tty=(none) comm="iptables-restor" exe="/sbin/iptables-restore"
> subj=user_u:system_r:iptables_t:s0 key=(null)
> 
> No matter what I do the machine refuses to read that file. Even if I
> re-create it manually. Has anyone run into this where iptables-restore
> is not allowed to read this file?
> 
> 

-- 
Atenciosamente,

Jorge Augusto Senger
BR10 Ltda - Gerência de TI
jorge@br10.com.br
42 32252888 / 84015330


[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 251 bytes --]