[Openswan Users] Error openning PF_KEY socket.

[Paul Wouters]

On Tue, 6 Nov 2007, KokHow.Teh at infineon.com wrote:

> 	I have the following error message when I tried to run ipsec:
>
> Jan  1 00:01:00 Danube daemon.err ipsec_setup:
> /usr/local/libexec/ipsec/eroute: Trouble opening PF_KEY family socket
> with error: access denied.  Check  permissions.  Should be 600.
> Jan  1 00:01:00 Danube daemon.err ipsec_setup: + ipsec spi --clear Jan
> 1 00:01:00 Danube daemon.err ipsec_setup: /usr/local/libexec/ipsec/spi:
> Trouble opening PF_KEY family socket with error: access denied.  Check
> pe rmissions.  Should be 600.
>
> 	I run the application as root. Appreciate if someone could point
> me to the right direction as to what permission it is referring to.

I have never seen that. Did you manually change path names in the script?
Are you running something else? SElinux perhaps? Other security kernel
patches?

Paul
-- 
Building and integrating Virtual Private Networks with Openswan:
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155