Work around SELinux nonsense

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6764 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb

Shorewall-common/changelog.txt

@@ -12,6 +12,8 @@ Changes in 4.0.0 RC 1
 
 6)  Make ':noah' the default.
 
+7)  Work around SELinux nonsense.
+
 Changes in 4.0.0 Beta 6
 
 1)  First step to adding compiler debugging facility.

Shorewall-common/releasenotes.txt

@@ -34,6 +34,9 @@ Problems corrected in 4.0.0 Beta 7.
     validated. Previously, very obvious errors would result in run-time
     errors.
 
+3)  "shorewall start" and "shorewall restart" no longer fail on SELinux
+    due to iptables-restore not being allowed to read from /var.
+
 Other changes in Shorewall 4.0.0 RC 1.
 
 1)  The shorewall-perl RPM may no longer be installed under Shorewall

Shorewall-perl/Shorewall/Chains.pm

@@ -1957,7 +1957,7 @@ sub create_netfilter_load() {
 	   '',
 	   'progress_message2 "Running iptables-restore..."',
 	   '',
-	   '$IPTABLES_RESTORE < ${VARDIR}/.iptables-restore-input'
+	   'cat ${VARDIR}/.iptables-restore-input | $IPTABLES_RESTORE'
 	 );
 
     emitj( 'if [ $? != 0 ]; then',