IPTables not starting with Fedora 6

[Jorge Augusto Senger]

< setenforce 0 > ?

P. Harlow escreveu:
> This might be better posted to an SELinux list however I thought I'd
> start here.
> 
> I have a fresh install of Fedora Core 6. All works well with IPTables
> however when I try to get it started at boot I get the following SELinux
> error:
> 
> type=AVC msg=audit(1165530432.263:80): avc: denied { read } for pid=2995
> comm="iptables-restor" name="iptables" dev=dm-0 ino=11599885
> scontext=user_u:system_r:iptables_t:s0
> tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
> type=SYSCALL msg=audit(1165530432.263:80): arch=40000003 syscall=5
> success=no exit=-13 a0=bffb4f67 a1=0 a2=1b6 a3=927e008 items=0 ppid=2986
> pid=2995 auid=501 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0
> fsgid=0 tty=(none) comm="iptables-restor" exe="/sbin/iptables-restore"
> subj=user_u:system_r:iptables_t:s0 key=(null)
> 
> No matter what I do the machine refuses to read that file. Even if I
> re-create it manually. Has anyone run into this where iptables-restore
> is not allowed to read this file?
> 
> 

-- 
Atenciosamente,

Jorge Augusto Senger
BR10 Ltda - Gerência de TI
jorge at br10.com.br
42 32252888 / 84015330

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 251 bytes
Desc: OpenPGP digital signature
Url : /pipermail/netfilter/attachments/20061208/c4ca7d76/signature.pgp