abhiseksanyal / tailscale-selinux-policy

SELinux policy for Tailscale
BSD 3-Clause "New" or "Revised" License
18 stars 2 forks source link

SELinux is preventing /usr/sbin/tailscaled from using the sys_ptrace capability #2

Open espentrydal opened 1 year ago

espentrydal commented 1 year ago

Hello, thank you for this workaround. When I follow the instructions, when I get to the point to restart tailscaled.service, it takes a long time and then exits with job failed because of a timeout. On RHEL 8. In the log:

setroubleshoot[11109]: SELinux is preventing /usr/sbin/tailscaled from using the sys_ptrace capability.

*****  Plugin catchall (100. confidence) suggests   **************************

If you believe that tailscaled should have the sys_ptrace capability by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do allow this access for now by executing:
# ausearch -c 'tailscaled' --raw | audit2allow -M my-tailscaled
# semodule -X 300 -i my-tailscaled.pp

It made no difference if I then followed the steps for uninstalling the rules. Reinstalling fixed it back to normal, but still no ssh into the server.