Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

LVS/piranha is setup and trying to get it to balance https instead of http. Setup https testing with wget - idea from this link. Works when I do it at the command prompt. With SELinux enforcing, the wget fails to run due to the lack of access to /dev/random. (Error - Could not seed PRNG; consider using --random-file. Disabling SSL due to encountered errors.)

wget runs as system_u:system_r:piranha_lvs_t:s0 but the file/device /dev/random has system_u:object_r:random_device_t:s0 Also, wget is trying to getattr and read.

How do you allow wget to use /dev/random so it will do ssl?

share|improve this question
add comment

1 Answer

  1. ran audit2allow to on the logs to find out what needed to be changed
  2. to get audit2allow, you need to install setroubleshoot via yum, at least on CentOS
  3. When I ran it audit2allow, said it that piranha_lvs_t needed access to random_device_t:chr_file both read and getattr
  4. and audit2allow said that the boolean global_ssp would solve the problem - i.e. setsebool global_ssp on

PS: yes, I am answering my own question.

share|improve this answer
    
That's no problem, but please mark it as accepted answer. –  Adrian Lang Oct 17 '12 at 18:38
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.