Curl and SELinux

martinklaus · January 12, 2021, 7:18pm

Hello Fedora community,

I’m using the following fail2ban config for sending Slack notifications.

coleturner/fail2ban-slack-action/blob/master/slack-notify.conf

#
# Author: Cole Turner
# coleturner.me
# turner.cole@gmail.com
#

[Definition]

# Option:  actionstart
# Notes.:  command executed once at the start of Fail2Ban.
# Values:  CMD
#
actionstart = curl -s -o /dev/null -X POST --data-urlencode "payload={\"text\": \"Fail2Ban (<name>) jail has started\", \"channel\": \"#<slack_channel>\" }" '<slack_webhook_url>'

# Option:  actionstop
# Notes.:  command executed once at the end of Fail2Ban
# Values:  CMD
#
actionstop = curl -s -o /dev/null -X POST --data-urlencode "payload={\"text\": \"Fail2Ban (<name>) jail has stopped\", \"channel\": \"#<slack_channel>\" }" '<slack_webhook_url>'

This file has been truncated. show original

The curl return 0curl: (7) Couldn’t connect to server".

SELinux is blocking the connection, how can I allow it?

type=AVC msg=audit(1610478757.252:1101): avc: denied { name_connect } for pid=20862 
comm="curl" dest=443 scontext=system_u:system_r:fail2ban_t:s0 
tcontext=system_u:object_r:http_port_t:s0 tclass=tcp_socket permissive=1

tjdoyle · January 13, 2021, 9:11pm

Hi,

The solution given here, may help:

Thanks Tom.

martinklaus · January 14, 2021, 8:36am

Thanks for helping, the linked solutions is more specific than the nis_enabled thing. I will try it.
The default value for nis is off?