[Openswan Users] ip route problem

[Marek Greško]

Hello,

I had a working setup using Fedora 11. Yesterday I replaced my i386 box with 
x86_64 and Fedora 12 installed (with latest updates). I then run into problems 
setting routes for leftsourceip. I have tunnel working, but leftsourceip is 
not applied since I get this in the logs:

Jan 12 12:51:12 gw pluto[3086]: "myconn": route-client output: /usr/libexec
/ipsec/_updown.netkey: doroute `ip route replace 192.168.40.0/22  dev eth1  
src 192.168.15.254' failed (RTNETLINK answers: Operation not permitted)

When I try to add the route manually, everything works.

Firstly I was suspecting SELinux. But I have SELinux disabled:

[root at gw log]# sestatus -v
SELinux status:                 disabled

Current versions:
[root at gw log]# rpm -q kernel openswan
kernel-2.6.31.5-127.fc12.x86_64
kernel-2.6.31.9-174.fc12.x86_64
openswan-2.6.23-1.fc12.x86_64

[root at gw log]# uname -a
Linux gw.xxxxx.lan 2.6.31.9-174.fc12.x86_64 #1 SMP Mon Dec 21 05:33:33 UTC 
2009 x86_64 x86_64 x86_64 GNU/Linux

Do you have any suggestions what should I look for?

Thank you.

Marek