Encryption failure when encrypting a volume in Red Hat Enterprise Linux 6.x with SELinux enabled

Technical Articles ID: KB84007
Last Modified: 10/13/2021

Environment

McAfee Cloud Workload Security (CWS) for AWS
McAfee Data Protection for Cloud (DPC)

Red Hat Enterprise Linux (RHEL) 6.x

Problem

You are unable to encrypt a volume on an RHEL 6.x system with SELinux enabled when using DPC 1.0.

An encryption failure occurs because rsync was not able to start.

The failure is visible in ePO in the column against that volume; the message rsync failed displays.

The client log records the following error (log location: /opt/McAfee/dpcagent/logs/):

[ERROR] CDPCUnixDisk::DoCopy sent status to ePO, rsync failed with error = 3072

Workaround

Change permissions and modify the SELinux policy using the command prompt:

At the client, log on as root.
At the command prompt, type the following:

semanage permissive -a rsync_t
To modify the SELinux policy, type the following:

rsync_t permissive
Initiate encryption. DPC is now able to initiate rsync and the process completes successfully.
To revert to the above setting:
1. Log on as root
2. Run the following command:
  
  semanage permissive -d rsync_t
3. Close the command prompt.

Affected Products

Cloud Workload Security 5.3.x
Cloud Workload Security 5.2.x
Install/Uninstall
Known Issue/Product Defect

Languages:

This article is available in the following languages:

English United States
Spanish Spain
French
Italian
Portuguese Brasileiro

Knowledge Center

Encryption failure when encrypting a volume in Red Hat Enterprise Linux 6.x with SELinux enabled

Environment

Problem

Workaround

Affected Products

Languages:

Title

Title

Knowledge Center

Encryption failure when encrypting a volume in Red Hat Enterprise Linux 6.x with SELinux enabled

Environment

Problem

Workaround

Affected Products

Languages:

Choose your region

Title

Title