SELinux setting httpd_can_network_relay to on throws error
by JamesMore from LinuxQuestions.org on (#5T3BS)
I saw that when I try and allow the httpd to make network connections it works
setsebool httpd_can_network_connect 1
but trying to set the persistence it fails with a error
Code:setsebool -P httpd_can_network_connect 1
libsepol.context_from_record: type kdump_var_lib_t is not defined
libsepol.context_from_record: could not create context structure
libsepol.context_from_string: could not create context structure
libsepol.sepol_context_to_sid: could not convert system_u:object_r:kdump_var_lib_t:s0 to sid
invalid context system_u:object_r:kdump_var_lib_t:s0
Trying to update and redo the default policy does not seem to work
Code:# dnf repolist
repo id repo name
appstream CentOS Linux 8 - AppStream
baseos CentOS Linux 8 - BaseOS
epel Extra Packages for Enterprise Linux 8 - x86_64
epel-modular Extra Packages for Enterprise Linux Modular 8 - x86_64
extras CentOS Linux 8 - Extras
mariadb MariaDB
# dnf reinstall "selinux-policy*"
Last metadata expiration check: 4:10:47 ago on Wed 15 Dec 2021 07:32:51 PM UTC.
Dependencies resolved.
====================================================================================================================================================================================
Package Architecture Version Repository Size
====================================================================================================================================================================================
Reinstalling:
selinux-policy noarch 3.14.3-80.el8 baseos 635 k
selinux-policy-targeted noarch 3.14.3-80.el8 baseos 15 M
Transaction Summary
====================================================================================================================================================================================
Total download size: 16 M
Installed size: 50 M
Is this ok [y/N]: y
Downloading Packages:
(1/2): selinux-policy-3.14.3-80.el8.noarch.rpm 3.2 MB/s | 635 kB 00:00
(2/2): selinux-policy-targeted-3.14.3-80.el8.noarch.rpm 4.7 MB/s | 15 MB 00:03
------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total 4.7 MB/s | 16 MB 00:03
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
Preparing : 1/1
Reinstalling : selinux-policy-3.14.3-80.el8.noarch 1/4
Running scriptlet: selinux-policy-3.14.3-80.el8.noarch 1/4
libsemanage.bunzip: Failure reading bz2 archive.
Symbol not inside parenthesis at line 1 of /var/lib/selinux/targeted/tmp/modules/100/rasdaemon/cil
libsemanage.semanage_load_files: Error while reading from file /var/lib/selinux/targeted/tmp/modules/100/rasdaemon/cil.
semodule: Failed!
Running scriptlet: selinux-policy-targeted-3.14.3-80.el8.noarch 2/4
Reinstalling : selinux-policy-targeted-3.14.3-80.el8.noarch 2/4
Running scriptlet: selinux-policy-targeted-3.14.3-80.el8.noarch 2/4
Cleanup : selinux-policy-targeted-3.14.3-80.el8.noarch 3/4
Running scriptlet: selinux-policy-targeted-3.14.3-80.el8.noarch 3/4
Cleanup : selinux-policy-3.14.3-80.el8.noarch 4/4
Running scriptlet: selinux-policy-3.14.3-80.el8.noarch 4/4
Verifying : selinux-policy-3.14.3-80.el8.noarch 1/4
Verifying : selinux-policy-3.14.3-80.el8.noarch 2/4
Verifying : selinux-policy-targeted-3.14.3-80.el8.noarch 3/4
Verifying : selinux-policy-targeted-3.14.3-80.el8.noarch 4/4
Installed products updated.
Reinstalled:
selinux-policy-3.14.3-80.el8.noarch selinux-policy-targeted-3.14.3-80.el8.noarch
Complete!
Any ideas ?
setsebool httpd_can_network_connect 1
but trying to set the persistence it fails with a error
Code:setsebool -P httpd_can_network_connect 1
libsepol.context_from_record: type kdump_var_lib_t is not defined
libsepol.context_from_record: could not create context structure
libsepol.context_from_string: could not create context structure
libsepol.sepol_context_to_sid: could not convert system_u:object_r:kdump_var_lib_t:s0 to sid
invalid context system_u:object_r:kdump_var_lib_t:s0
Trying to update and redo the default policy does not seem to work
Code:# dnf repolist
repo id repo name
appstream CentOS Linux 8 - AppStream
baseos CentOS Linux 8 - BaseOS
epel Extra Packages for Enterprise Linux 8 - x86_64
epel-modular Extra Packages for Enterprise Linux Modular 8 - x86_64
extras CentOS Linux 8 - Extras
mariadb MariaDB
# dnf reinstall "selinux-policy*"
Last metadata expiration check: 4:10:47 ago on Wed 15 Dec 2021 07:32:51 PM UTC.
Dependencies resolved.
====================================================================================================================================================================================
Package Architecture Version Repository Size
====================================================================================================================================================================================
Reinstalling:
selinux-policy noarch 3.14.3-80.el8 baseos 635 k
selinux-policy-targeted noarch 3.14.3-80.el8 baseos 15 M
Transaction Summary
====================================================================================================================================================================================
Total download size: 16 M
Installed size: 50 M
Is this ok [y/N]: y
Downloading Packages:
(1/2): selinux-policy-3.14.3-80.el8.noarch.rpm 3.2 MB/s | 635 kB 00:00
(2/2): selinux-policy-targeted-3.14.3-80.el8.noarch.rpm 4.7 MB/s | 15 MB 00:03
------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total 4.7 MB/s | 16 MB 00:03
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
Preparing : 1/1
Reinstalling : selinux-policy-3.14.3-80.el8.noarch 1/4
Running scriptlet: selinux-policy-3.14.3-80.el8.noarch 1/4
libsemanage.bunzip: Failure reading bz2 archive.
Symbol not inside parenthesis at line 1 of /var/lib/selinux/targeted/tmp/modules/100/rasdaemon/cil
libsemanage.semanage_load_files: Error while reading from file /var/lib/selinux/targeted/tmp/modules/100/rasdaemon/cil.
semodule: Failed!
Running scriptlet: selinux-policy-targeted-3.14.3-80.el8.noarch 2/4
Reinstalling : selinux-policy-targeted-3.14.3-80.el8.noarch 2/4
Running scriptlet: selinux-policy-targeted-3.14.3-80.el8.noarch 2/4
Cleanup : selinux-policy-targeted-3.14.3-80.el8.noarch 3/4
Running scriptlet: selinux-policy-targeted-3.14.3-80.el8.noarch 3/4
Cleanup : selinux-policy-3.14.3-80.el8.noarch 4/4
Running scriptlet: selinux-policy-3.14.3-80.el8.noarch 4/4
Verifying : selinux-policy-3.14.3-80.el8.noarch 1/4
Verifying : selinux-policy-3.14.3-80.el8.noarch 2/4
Verifying : selinux-policy-targeted-3.14.3-80.el8.noarch 3/4
Verifying : selinux-policy-targeted-3.14.3-80.el8.noarch 4/4
Installed products updated.
Reinstalled:
selinux-policy-3.14.3-80.el8.noarch selinux-policy-targeted-3.14.3-80.el8.noarch
Complete!
Any ideas ?