I figured out how to fix it the "right" way. :-) There's a great walkthrough of analysis tools for SELinux audit logs and how to create new permissions policies from them here: http://wiki.centos.org/HowTos/SELinux#head-aa437f65e1c7873cddbafd9e9a73bbf9d102c072
After that, it was cookbook. Had to do it once for Shorewall6, which worked on the first try, and then again for radvd - it was making some system call that its default policy wasn't covering for some reason. It all starts on boot normally now without workarounds... thanks for the pointer in the right direction earlier, at 9am today I didn't even know what SELinux was, and now I have some of the fu. :-) Thanks again, Andy ________________________________________ From: Tom Eastep [[email protected]] Sent: Sunday, July 31, 2011 10:00 AM To: Shorewall Users Subject: Re: [Shorewall-users] Newb setup problem: On Jul 31, 2011, at 9:52 AM, Andrew Silverman wrote: > Well, thanks for identifying the problem at least! - I'll do some digging on > the web and see if anything presents itself, but otherwise hopefully someone > on the list will have a clue. Do you have any particular suggestions for a > workaround? > Set AUTOMAKE=Yes in shorewall6.conf. So long as your current compiled script is up to date when you re-boot, Shorewall6 will start at boot. -Tom Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ Got Input? Slashdot Needs You. Take our quick survey online. Come on, we don't ask for help often. Plus, you'll get a chance to win $100 to spend on ThinkGeek. http://p.sf.net/sfu/slashdot-survey _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users ------------------------------------------------------------------------------ Got Input? Slashdot Needs You. Take our quick survey online. Come on, we don't ask for help often. Plus, you'll get a chance to win $100 to spend on ThinkGeek. http://p.sf.net/sfu/slashdot-survey _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
