From: "P. Harlow" <wolf-r1@wispertel.net>
To: netfilter@lists.netfilter.org
Subject: IPTables not starting with Fedora 6
Date: Thu, 07 Dec 2006 17:51:31 -0700 [thread overview]
Message-ID: <4578B713.8020406@wispertel.net> (raw)
This might be better posted to an SELinux list however I thought I'd
start here.
I have a fresh install of Fedora Core 6. All works well with IPTables
however when I try to get it started at boot I get the following SELinux
error:
type=AVC msg=audit(1165530432.263:80): avc: denied { read } for pid=2995
comm="iptables-restor" name="iptables" dev=dm-0 ino=11599885
scontext=user_u:system_r:iptables_t:s0
tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
type=SYSCALL msg=audit(1165530432.263:80): arch=40000003 syscall=5
success=no exit=-13 a0=bffb4f67 a1=0 a2=1b6 a3=927e008 items=0 ppid=2986
pid=2995 auid=501 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0
fsgid=0 tty=(none) comm="iptables-restor" exe="/sbin/iptables-restore"
subj=user_u:system_r:iptables_t:s0 key=(null)
No matter what I do the machine refuses to read that file. Even if I
re-create it manually. Has anyone run into this where iptables-restore
is not allowed to read this file?
next reply other threads:[~2006-12-08 0:51 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2006-12-08 0:51 P. Harlow [this message]
2006-12-08 10:19 ` IPTables not starting with Fedora 6 Jorge Augusto Senger
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4578B713.8020406@wispertel.net \
--to=wolf-r1@wispertel.net \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox