[Openswan Users] Pluto has conflict with SeLinux
OCG Technical Support
support at ocg.ca
Tue Sep 16 11:01:19 EDT 2008
I'm trying to run IPSec on a system with SeLinux on it. It appears that
Pluto has a problem I can't get past (I add local policies for this AVC
below but doesn't solve the problem):
host=firewall.ocg.ca type=AVC msg=audit(1221407602.428:4482): avc: denied {
bind } for pid=24677 comm="pluto" scontext=unconfined_u:system_r:ipsec_t:s0
tcontext=unconfined_u:system_r:ipsec_t:s0 tclass=netlink_xfrm_socket
Any ideas? Has anyone written a local policy for Pluto that works?
Thanks,
MD
More information about the Users
mailing list