Article 5T3BS SELinux setting httpd_can_network_relay to on throws error

SELinux setting httpd_can_network_relay to on throws error

by
JamesMore
from LinuxQuestions.org on (#5T3BS)
I saw that when I try and allow the httpd to make network connections it works

setsebool httpd_can_network_connect 1

but trying to set the persistence it fails with a error

Code:setsebool -P httpd_can_network_connect 1
libsepol.context_from_record: type kdump_var_lib_t is not defined
libsepol.context_from_record: could not create context structure
libsepol.context_from_string: could not create context structure
libsepol.sepol_context_to_sid: could not convert system_u:object_r:kdump_var_lib_t:s0 to sid
invalid context system_u:object_r:kdump_var_lib_t:s0
Trying to update and redo the default policy does not seem to work

Code:# dnf repolist
repo id repo name
appstream CentOS Linux 8 - AppStream
baseos CentOS Linux 8 - BaseOS
epel Extra Packages for Enterprise Linux 8 - x86_64
epel-modular Extra Packages for Enterprise Linux Modular 8 - x86_64
extras CentOS Linux 8 - Extras
mariadb MariaDB
# dnf reinstall "selinux-policy*"
Last metadata expiration check: 4:10:47 ago on Wed 15 Dec 2021 07:32:51 PM UTC.
Dependencies resolved.
====================================================================================================================================================================================
Package Architecture Version Repository Size
====================================================================================================================================================================================
Reinstalling:
selinux-policy noarch 3.14.3-80.el8 baseos 635 k
selinux-policy-targeted noarch 3.14.3-80.el8 baseos 15 M

Transaction Summary
====================================================================================================================================================================================

Total download size: 16 M
Installed size: 50 M
Is this ok [y/N]: y
Downloading Packages:
(1/2): selinux-policy-3.14.3-80.el8.noarch.rpm 3.2 MB/s | 635 kB 00:00
(2/2): selinux-policy-targeted-3.14.3-80.el8.noarch.rpm 4.7 MB/s | 15 MB 00:03
------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total 4.7 MB/s | 16 MB 00:03
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
Preparing : 1/1
Reinstalling : selinux-policy-3.14.3-80.el8.noarch 1/4
Running scriptlet: selinux-policy-3.14.3-80.el8.noarch 1/4
libsemanage.bunzip: Failure reading bz2 archive.
Symbol not inside parenthesis at line 1 of /var/lib/selinux/targeted/tmp/modules/100/rasdaemon/cil
libsemanage.semanage_load_files: Error while reading from file /var/lib/selinux/targeted/tmp/modules/100/rasdaemon/cil.
semodule: Failed!

Running scriptlet: selinux-policy-targeted-3.14.3-80.el8.noarch 2/4
Reinstalling : selinux-policy-targeted-3.14.3-80.el8.noarch 2/4
Running scriptlet: selinux-policy-targeted-3.14.3-80.el8.noarch 2/4
Cleanup : selinux-policy-targeted-3.14.3-80.el8.noarch 3/4
Running scriptlet: selinux-policy-targeted-3.14.3-80.el8.noarch 3/4
Cleanup : selinux-policy-3.14.3-80.el8.noarch 4/4
Running scriptlet: selinux-policy-3.14.3-80.el8.noarch 4/4
Verifying : selinux-policy-3.14.3-80.el8.noarch 1/4
Verifying : selinux-policy-3.14.3-80.el8.noarch 2/4
Verifying : selinux-policy-targeted-3.14.3-80.el8.noarch 3/4
Verifying : selinux-policy-targeted-3.14.3-80.el8.noarch 4/4
Installed products updated.

Reinstalled:
selinux-policy-3.14.3-80.el8.noarch selinux-policy-targeted-3.14.3-80.el8.noarch

Complete!
Any ideas ?latest?d=yIl2AUoC8zA latest?i=hFIqSgF301s:lb_d99b2PDU:F7zBnMy latest?i=hFIqSgF301s:lb_d99b2PDU:V_sGLiP latest?d=qj6IDK7rITs latest?i=hFIqSgF301s:lb_d99b2PDU:gIN9vFw
External Content
Source RSS or Atom Feed
Feed Location https://feeds.feedburner.com/linuxquestions/latest
Feed Title LinuxQuestions.org
Feed Link https://www.linuxquestions.org/questions/
Reply 0 comments