Difference in the selinux context for the iptables file in Red Hat Enterprise Linux 5
Issue
-
On a fresh RHEL 5 install the /etc/sysconfig/iptables file gets a "etc_t" type context but the selinux rules give it a "etc_runtime_t" context :
# semanage fcontext -l | grep /etc/sysconfig/iptables /etc/sysconfig/iptables regular file system_u:object_r:etc_runtime_t:s0 /etc/sysconfig/iptables\.save regular file system_u:object_r:etc_runtime_t:s0
Environment
- Red Hat Enterprise Linux 5
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.