On 11/8/18 3:46 PM, Paul Smith wrote: > On Thu, Nov 8, 2018 at 11:42 PM Ed Greshko <ed.gres...@greshko.com> wrote: >> >>>>>>> That oughta do it. And no, the GUI doesn't offer this setting that I can >>>>>>> find. >>>>>> Interesting. I don't have a Gnome system up at 03:30 but KDE has that >>>>>> option available. >>>>> I'm on Xfce and nm-connection-editor doesn't seem to show it. >>>> We are talking about the link-local Only setting for the IPv6 setting on >>>> the local >>>> interface, yes? Not in the VPN setup. >>>> AFAIK, L2TP doesn't support IPv6. >>> Yes, Ed, I was talking about L2TP. I cannot at the moment try with no >>> IPv6 configuration, as Selinux is denying stroke and strongswan -- and >>> therefore the connection cannot be established. >> >> OK, see my response about the difference between the GUI of the L2TP on Xfce >> and KDE. >> Wonder why..... >> >> If you issue a "sudo setenforce 0" to put selinux in Permissive mode, can >> you connect? > > Thanks, Ed. I did issue the command you recommend, but with no > success. I guess the Permissive mode does not completely disable > Selinux.
In my experience, no, permissive mode does not disable all of SELinux's blocks, and _especially_ stuff having to to with networking (including pipes). It's always bothered me. ---------------------------------------------------------------------- - Rick Stevens, Systems Engineer, AllDigital ri...@alldigital.com - - AIM/Skype: therps2 ICQ: 226437340 Yahoo: origrps2 - - - - You know the old saying--any technology sufficiently advanced is - - indistinguishable from a Perl script - - --Programming Perl, 2nd Edition - ---------------------------------------------------------------------- _______________________________________________ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
