SElinux denies { module_request } performed by unbound-anchor.

Solution Verified - Updated -

Issue

  • SElinux denies { module_request } performed by unbound-anchor.

  • The following log message is observed in /var/log/audit/audit.log

# ausearch -m avc -if var/log/audit/audit.log

[...]

time->Thu Dec  8 00:00:13 2016
type=SYSCALL msg=audit(1481122813.101:1075): arch=c000003e syscall=41 success=no exit=-97 a0=a a1=2 a2=0 a3=c0 items=0 ppid=1 pid=4070 auid=4294967295 uid=996 gid=993 euid=996 suid=996 fsuid=996 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="unbound-anchor" exe="/usr/sbin/unbound-anchor" subj=system_u:system_r:named_t:s0 key=(null)
type=AVC msg=audit(1481122813.101:1075): avc:  denied  { module_request } for  pid=4070 comm="unbound-anchor" kmod="net-pf-10" scontext=system_u:system_r:named_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=system

[...]

  • How do we resolve this?

Environment

  • Red Hat Enterprise Linux 7 (kernel-3.10.0-327.10.1.el7)
  • unbound-1.4.20-26.el7
  • unbound-libs-1.4.20-26.el7

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In
Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.