On 01/22/2015 08:43 AM, Asterisk REQ wrote:
> Ok all OK now, thanks David, was Selinux policy, I change it but.... not
> reboot  :( so so sorry, I reboot and now all perfect , execute any
> script and sendmail too
>
> Thanks again guys!!!!!
>
> El 22/01/2015 a las 16:33, Asterisk REQ escribió:
>> Thanks for help David but selinux is disabled:
>>
>> /etc/sysconfig/selinux
>>
>> # This file controls the state of SELinux on the system.
>> # SELINUX= can take one of these three values:
>> #     enforcing - SELinux security policy is enforced.
>> #     permissive - SELinux prints warnings instead of enforcing.
>> #     disabled - No SELinux policy is loaded.
>> SELINUX=disabled

Couple things -

I really curious as to why fail2ban would be blocked by selinux.  I've 
been running fail2ban for years on EL6 with selinux in enforcing mode. 
Where there any AVCs?  Perhaps a relabel is in order?

Don't run with SELINUX=disabled.  Run with SELINUX=permissive.  This 
allows you to fix the SELinux issues and then switch back to enforcing 
without a relabel.  With SELinux disabled filesystem labels get messed 
up.  I highly recommend spending a little time and getting things 
working with selinux enforcing.

- Orion


-- 
Orion Poplawski
Technical Manager                     303-415-9701 x222
NWRA/CoRA Division                    FAX: 303-415-9702
3380 Mitchell Lane                  [email protected]
Boulder, CO 80301              http://www.cora.nwra.com

------------------------------------------------------------------------------
New Year. New Location. New Benefits. New Data Center in Ashburn, VA.
GigeNET is offering a free month of service with a new server in Ashburn.
Choose from 2 high performing configs, both with 100TB of bandwidth.
Higher redundancy.Lower latency.Increased capacity.Completely compliant.
http://p.sf.net/sfu/gigenet
_______________________________________________
Fail2ban-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fail2ban-users

Reply via email to