[Openswan Users] Help Please! Pluto won't run

[Paul Wouters]

> I have a problem getting openswan to operate on a new computer
> installation.  I have successfully install Openswan on other version of
> Fedora, but this is the first attempt on Core 9.  I have researched this
> problem on the net and haven't found anything similar.
> 
> I think the problem is around /dev/random and /dev/urandom as
> [root at monitor ipsec.d]# ipsec newhostkey --output hostkey.secrets
> never finishes unless I first
> rm /dev/random -f;mknod /dev/random c 1 9

That's a random driver/hardware issue we cannot really help with.

> Jul  6 11:37:27 monitor ipsec__plutorun: pluto: unable to create lock file
> "/var/run/pluto/pluto.pid" (13 Permission denied)
> Jul  6 11:37:27 monitor kernel: type=1400 audit(1215369447.785:9): avc: 
> denied  { write } for  pid=2005 comm="pluto" name="pluto" dev=sda3
> ino=663686 scontext=system_u:system_r:ipsec_t:s0
> tcontext=system_u:object_r:ipsec_var_run_t:s0 tclass=dir

Disable SElinux.

Paul