On Sat, Aug 12, 2023 at 6:08 PM François Patte <
francois.pa...@mi.parisdescartes.fr> wrote:

> Bonjour,
>
> I come accross a problem with nftables: it was impossible to start
> nftables, the error message is:
>
> internal:0:0-0: Error: Could not open file
> "/etc/sysconfig/nftables.conf": Permission denied
>
> This file /etc/sysconfig/nftables.conf has 755 permissions.
>
> I tried to get informatons from the internet but did not find a
> solution.
>
> I tested wether it was a selinux problem and I won...
>
> setenforce 0
>
> solved the problem....
>
> Now I went back to setenforce 1 but the problem is : if I reboot my
> machine, the problem will come back.
>
> How to make selinux accept nftables?
>
Hi,

The nftables service starts on my system without any issue. Are you aware
of any customizations made on your system?
What do the following commands show?

  restorecon -Rvn /etc/sysconfig/nftables.conf /etc/nftables /usr/sbin/nft
  ausearch -i -m avc,user_avc,selinux_err,user_selinux_err -ts boot


> fc36 nftables version 1.0.1
>
> Thank you for helping.
>
> --
> François Patte
> UFR de mathématiques et informatique
> Laboratoire CNRS MAP5, UMR 8145
> Université Paris Descartes
> 45, rue des Saints Pères
> F-75270 Paris Cedex 06
> Tél. +33 (0)6 7892 5822
> http://www.math-info.univ-paris5.fr/~patte
> FSF
>
> https://www.fsf.org/blogs/community/presenting-shoetool-happy-holidays-from-the-fsf
> _______________________________________________
> users mailing list -- users@lists.fedoraproject.org
> To unsubscribe send an email to users-le...@lists.fedoraproject.org
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
> Do not reply to spam, report it:
> https://pagure.io/fedora-infrastructure/new_issue
>


-- 

Zdenek Pytela
Security SELinux team
_______________________________________________
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to