selinux problem on euk1 / pear.php.net

Hi all,


I am really at the end of my knowledge and would be really grateful if
someone could have a look into the problem I have on euk1 / pear.php.net

The problem is that I can't save the iptables rules (as root user):
> [root@IS-4701 sysconfig]# /etc/init.d/iptables save
> Saving firewall rules to /etc/sysconfig/iptables: cp: cannot remove
> `/etc/sysconfig/iptables': Operation not permitted [FAILED]

There seems to be something wrong with the selinux labels on that
files, since "fixfiles check" complains:
> [root@IS-4701 sysconfig]# fixfiles check /etc/
> /sbin/restorecon reset /etc/sysconfig/iptables context
> system_u:object_r:file_t:s0->system_u:object_r:etc_t:s0

But it can't reset that label:
> [root@IS-4701 sysconfig]# /sbin/fixfiles relabel /etc
>    Files in the /tmp directory may be labeled incorrectly, this
>    command can remove all files in /tmp.  If you choose to remove
>    files from /tmp, a reboot will be required after completion.
>    Do you wish to clean out the /tmp directory [N]? n
> /sbin/restorecon set
>     context /etc/sysconfig/iptables->system_u:object_r:etc_t:s0
>    failed:'Operation not permitted' [

I think that
> touch /.autorelabel
> reboot 
could help, but don't really know if that requires manual interaction -
something that took down pear.php.net 6 hours yesterday. So I'm
reluctant to do that again just for fun.


Does someone know how to fix the problem?

-- 
Regards/Mit freundlichen Grüßen
Christian Weiske

-= Geeking around in the name of science since 1982 =-

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.10 (GNU/Linux)

iEYEARECAAYFAkno92kACgkQFMhaCCTq+CPYJgCgwXd57VgBHvTryj0Pwkc3K0pd
XJgAoPBkRzx5gfoQB8X6TOQgrY9PNxlI
=lJO1
-----END PGP SIGNATURE-----