* xt_SECMARK: unable to map security context 'httpcontext (error)
@ 2013-06-03 17:12 Kevin Wilson
2013-06-13 15:13 ` Daniel Wagner
0 siblings, 1 reply; 2+ messages in thread
From: Kevin Wilson @ 2013-06-03 17:12 UTC (permalink / raw)
To: netfilter
Hi,
I am trying in Ubuntu 13.04 to run this:
-
modprobe xt_SECMARK
than:
iptables -t mangle -A PREROUTING -p tcp --dport 80 -j SECMARK --selctx httpconte
And I get:
iptables: No chain/target/match by that name.
syslog says:
Jun 3 20:09:48 amd kernel: [ 3269.413962] xt_SECMARK: unable to map
security context 'httpcontext
what should I do ?
Kernel:
3.8.0-19-generic
iptables v1.4.12
regards,
Kevin
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: xt_SECMARK: unable to map security context 'httpcontext (error)
2013-06-03 17:12 xt_SECMARK: unable to map security context 'httpcontext (error) Kevin Wilson
@ 2013-06-13 15:13 ` Daniel Wagner
0 siblings, 0 replies; 2+ messages in thread
From: Daniel Wagner @ 2013-06-13 15:13 UTC (permalink / raw)
To: Kevin Wilson; +Cc: netfilter
Hi Kevin,
On 06/03/2013 07:12 PM, Kevin Wilson wrote:
> Hi,
> I am trying in Ubuntu 13.04 to run this:
>
> -
> modprobe xt_SECMARK
> than:
> iptables -t mangle -A PREROUTING -p tcp --dport 80 -j SECMARK --selctx httpconte
>
> And I get:
> iptables: No chain/target/match by that name.
>
> syslog says:
> Jun 3 20:09:48 amd kernel: [ 3269.413962] xt_SECMARK: unable to map
> security context 'httpcontext
>
> what should I do ?
IIRC, you need to specify the complete SELinux context, e.g.
system_u:object_r:user_home_t
HTH,
daniel
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2013-06-13 15:13 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2013-06-03 17:12 xt_SECMARK: unable to map security context 'httpcontext (error) Kevin Wilson
2013-06-13 15:13 ` Daniel Wagner
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox