caching-nameserver SELinux

[S Mathias]

i just wanted to install a local caching dns name server:

yum -y install caching-nameserver

but it can't start, because SELinux is preventing it:

http://pastebin.com/raw.php?i=V9GK49mJ

I already tried:

touch /.autorelabel
reboot

but it still doesn't starts :\ problems the same.

theres a "fix command":
setsebool -P domain_kernel_load_modules 1
should i try it? will my pc be "safe" after this command? :\

thank you

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 12/13/2010 03:41 PM, S Mathias wrote:
> i just wanted to install a local caching dns name server:
>
> yum -y install caching-nameserver
>
> but it can't start, because SELinux is preventing it:
>
> http://pastebin.com/raw.php?i=V9GK49mJ
>
> I already tried:
>
> touch /.autorelabel
> reboot
>
> but it still doesn't starts :\ problems the same.
>
> theres a "fix command":
> setsebool -P domain_kernel_load_modules 1
> should i try it? will my pc be "safe" after this command? :\
>
> thank you

This is happening because you disabled ipv6 networking.  You can ignore
this avc.
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.11 (GNU/Linux)
> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAk0GhuAACgkQrlYvE4MpobOQWwCguADj/Ed9qQBcBDKYG7rasUnX
> ZTsAoKTbbGACmKagF26Q/8APvwamwnfw
> =uNrW
> -----END PGP SIGNATURE-----

[S Mathias]

"You can ignore
this avc."

:O And how can i start the caching-nameserver, if i want to disable ipv6?

thank you

--- On Mon, 12/13/10, Daniel J Walsh  wrote:

From: Daniel J Walsh 
Subject: Re: caching-nameserver SELinux
To: "Community support for Fedora users" 
Cc: "S Mathias" 
Date: Monday, December 13, 2010, 8:49 PM

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 12/13/2010 03:41 PM, S Mathias wrote:
> i just wanted to install a local caching dns name server:
>
> yum -y install caching-nameserver
>
> but it can't start, because SELinux is preventing it:
>
> http://pastebin.com/raw.php?i=V9GK49mJ
>
> I already tried:
>
> touch /.autorelabel
> reboot
>
> but it still doesn't starts :\ problems the same.
>
> theres a "fix command":
> setsebool -P domain_kernel_load_modules 1
> should i try it? will my pc be "safe" after this command? :\
>
> thank you

This is happening because you disabled ipv6 networking.  You can ignore
this avc.
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.11 (GNU/Linux)
> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAk0GhuAACgkQrlYvE4MpobOQWwCguADj/Ed9qQBcBDKYG7rasUnX
> ZTsAoKTbbGACmKagF26Q/8APvwamwnfw
> =uNrW
> -----END PGP SIGNATURE-----

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 12/14/2010 04:58 AM, S Mathias wrote:
> "You can ignore
> this avc."
>
> :O And how can i start the caching-nameserver, if i want to disable ipv6?
>
> thank you

It should be starting, this AVC should not be blocking the name server
from starting.
> --- On Mon, 12/13/10, Daniel J Walsh  wrote:
>
> From: Daniel J Walsh 
> Subject: Re: caching-nameserver SELinux
> To: "Community support for Fedora users" 
> Cc: "S Mathias" 
> Date: Monday, December 13, 2010, 8:49 PM
>
> On 12/13/2010 03:41 PM, S Mathias wrote:
> > i just wanted to install a local caching dns name server:
> > yum -y install caching-nameserver
> > but it can't start, because SELinux is preventing it:
> > http://pastebin.com/raw.php?i=V9GK49mJ
> > I already tried:
> > touch /.autorelabel
> > reboot
> > but it still doesn't starts :\ problems the same.
> > theres a "fix command":
> > setsebool -P domain_kernel_load_modules 1
> > should i try it? will my pc be "safe" after this command? :\
> > thank you
>
> This is happening because you disabled ipv6 networking.  You can ignore
> this avc.
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.11 (GNU/Linux)
> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAk0HdTkACgkQrlYvE4MpobMC+ACgktyAdNTuFhyoaySrQPHMY80f
> MTwAn07F+GWV4pXKaTi0QilWjZE6urA2
> =+Iac
> -----END PGP SIGNATURE-----

[Tim]

On Tue, 2010-12-14 at 01:58 -0800, S Mathias wrote:
> And how can i start the caching-nameserver, if i want to disable ipv6?

It shouldn't really be a problem.  But look through the named.conf file,
and the "man named.conf" information, and start removing options that
configure "ipv6".

I'd make a wild guess that you're having problems because you do have
ipv6 networking partially running, rather than properly running or fully
disabled.