Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-53527

[Azure][debug kernel][RHEL-10]Failed to add rule in iptables security table

    • Icon: Bug Bug
    • Resolution: Not a Bug
    • Icon: Minor Minor
    • None
    • rhel-10.0.beta
    • iptables
    • No
    • Low
    • rhel-sst-networking-core
    • ssg_networking
    • None
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • x86_64
    • None

      What were you trying to do that didn't work?In debug kernel, when running command:(it's a command in the WALinuxAgent)
      iptables -w -t security -A OUTPUT -d 168.63.129.16 -p tcp -m owner --uid-owner 0 -j ACCEPT
      it reports failed logs and cannot add rule:
      Warning: Extension owner revision 0 not supported, missing kernel module?
      iptables v1.8.10 (nf_tables):  RULE_APPEND failed (No such file or directory): rule in chain OUTPUT

      • No such issue in normal kernel
      • No such issue in RHEL-9.5 debug kernel(5.14.0-480.el9.x86_64+debug)
      • No such issue in other tables(e.g. nat)
         
        Please provide the package NVR for which bug is seen:
        kernel-debug-modules-core-6.10.0-15.el10.x86_64
        kernel-debug-core-6.10.0-15.el10.x86_64
        kernel-debug-modules-6.10.0-15.el10.x86_64
        kernel-debug-6.10.0-15.el10.x86_64
         
        How reproducible:
        100%

      Steps to reproduce
      1. Prepare a RHEL-10 VM on Azure and boot up from debug kernel
      2. Run 'iptables -w -t security -A OUTPUT -d 168.63.129.16 -p tcp -m owner --uid-owner 0 -j ACCEPT'
       
      Expected results
      Can add this rule

      Actual results
      Cannot add this rule

      • If run 'iptables -t security -nvL' can also see the warning message

              psutter@redhat.com Phil Sutter
              yuxisun@redhat.com Yuxin Sun
              Phil Sutter Phil Sutter
              qe-baseos-daemons qe-baseos-daemons
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: