Selinux update breaks nscd?

[Jason L Tibbitts III]

>>>>> "DJW" == Daniel J Walsh <Daniel> writes:

DJW> Yes if you cp it to /usr/share/ssl/certs it should work.  FC4 has
DJW> moved these all to /etc/pki...

Need to fix up /etc/ldap.conf and /etc/openldap/ldap.conf as well;

Oops, nscd is prevented from even looking in /usr/share/ssl/certs:

audit(1118859883.371:0): avc:  denied  { search } for  pid=4686 exe=/usr/sbin/nscd name=certs dev=dm-3 ino=49456 scontext=root:system_r:nscd_t tcontext=system_u:object_r:cert_t tclass=dir

 - J<