On Wed, Apr 14, 2010 at 10:17 AM, Arthur Dent <misc.lists@blueyonder.co.uk> wrote:

Hello all,

As part of my security set-up I use, amongst other things, fail2ban.
This has many well known problems with SELinux but, with help from this
list in general and Dominick Grift in particular, I got a policy which
has worked without problems since (see the thread here:
https://www.redhat.com/archives/fedora-selinux-list/2009-December/msg00082.html)

Strange that iptables live in the unconfined_r role : should be system_u:system_r:iptables_t ?