Re: [gentoo-hardened] libipt_icmp.so on selinux

[Petre Rodan]

On Tue, Sep 02, 2003 at 06:02:43PM +0200, Felix Leimbach wrote:
> On Tue, 2 Sep 2003 17:46:55 +0300
> Petre Rodan <petre.rodan@××××××××××××.com> wrote:
>
> >
> > is there someone using selinux-2.4.21-r0 that can confirm if the following command returns 0 on their system:
> >
> > iptables -A INPUT -p icmp --icmp-type network-unreachable -j ACCEPT
> >
> > (and make sure it's not policy related :)
> >
> > it can be a bug in the selinux-sources-2.4.21, but I can't be sure until someone else also gets the error I'm getting (iptables v1.2.8: Unknown arg `--icmp-type')
> >
> > if i boot with a somewhat vanilla kernel that was compiled using the same .config as the one used for selinux and the same net-firewall/iptables-1.2.8-r1, my iptables command works.
>
> Hi,
>
> I had the same problem some time ago (used selinux 2.4.20-r? back then),
> and it turned out, that recompiling iptables without -fstack-protector
> fixed the problem. For me, the problem was _not_ related to the kernel.

you are right, i was on the wrong track. your solution worked flawlessly.



thanks,
peter

 
> HTH
>
> Felix
>
> --
> gentoo-hardened@g.o mailing list
>


--
gentoo-hardened@g.o mailing list