[EPEL-devel] Re: Fail2ban : SELinux is preventing /usr/bin/python2.7 from read access on the file disable

2020-02-26 Thread Stephen John Smoogen
On Wed, 26 Feb 2020 at 11:13, Nicolas Kovacs wrote: > Le 26/02/2020 à 15:48, Stephen John Smoogen a écrit : > > I would open a bug on this so that the maintainer knows about it. They > may not > > be on this list or may filter it to the 'read once a year' bucket. > Second, I > > would check to se

[EPEL-devel] Re: Fail2ban : SELinux is preventing /usr/bin/python2.7 from read access on the file disable

2020-02-26 Thread Nicolas Kovacs
Le 26/02/2020 à 15:48, Stephen John Smoogen a écrit : I would open a bug on this so that the maintainer knows about it. They may not be on this list or may filter it to the 'read once a year' bucket. Second, I would check to see what the audit2allow policy came up with and if the files it is al

[EPEL-devel] Re: Fail2ban : SELinux is preventing /usr/bin/python2.7 from read access on the file disable

2020-02-26 Thread Stephen John Smoogen
On Wed, 26 Feb 2020 at 07:06, Nicolas Kovacs wrote: > Hi, > > I have an Internet-facing server running CentOS 7. I just installed > Fail2ban > using the following packages: > >* fail2ban-server >* fail2ban-firewalld > > For the record, IPv6 is disabled on this server. > > Here's the SELin

[EPEL-devel] Re: Fail2ban : SELinux is preventing /usr/bin/python2.7 from read access on the file disable

2020-02-26 Thread Bussi Andrea
On 2/26/20 3:33 PM, Bussi Andrea wrote: On 2/26/20 2:52 PM, Nicolas Kovacs wrote: Le 26/02/2020 à 13:05, Nicolas Kovacs a écrit : Weirdly enough, when I follow this suggestion, generate the module and then empty audit.log and restart my server, I still get the exact same error again. Which

[EPEL-devel] Re: Fail2ban : SELinux is preventing /usr/bin/python2.7 from read access on the file disable

2020-02-26 Thread Bussi Andrea
On 2/26/20 2:52 PM, Nicolas Kovacs wrote: Le 26/02/2020 à 13:05, Nicolas Kovacs a écrit : Weirdly enough, when I follow this suggestion, generate the module and then empty audit.log and restart my server, I still get the exact same error again. Which makes Fail2ban unusable with SELinux in

[EPEL-devel] Re: Fail2ban : SELinux is preventing /usr/bin/python2.7 from read access on the file disable

2020-02-26 Thread Nicolas Kovacs
Le 26/02/2020 à 13:05, Nicolas Kovacs a écrit : Weirdly enough, when I follow this suggestion, generate the module and then empty audit.log and restart my server, I still get the exact same error again. Which makes Fail2ban unusable with SELinux in enforcing mode in the current state. Looks

[EPEL-devel] Re: Fail2ban : SELinux is preventing /usr/bin/python2.7 from read access on the file disable

2020-02-26 Thread Bussi Andrea
On 2/26/20 1:05 PM, Nicolas Kovacs wrote: Hi, I have an Internet-facing server running CentOS 7. I just installed Fail2ban using the following packages:   * fail2ban-server   * fail2ban-firewalld For the record, IPv6 is disabled on this server. Here's the SELinux error I get. ---