dhcpd and nscd bug
Farkas Levente
lfarkas at bppiac.hu
Wed May 18 08:21:03 UTC 2005
hi,
it seems that during startup dhcpd server try to read nscd's pid files
(i don't know why?):
-----------------------------------------------
May 15 00:20:32 atom kernel: audit(1116109232.315:0): avc: denied {
search } for pid=7400 exe=/usr/sbin/dhcpd name=nscd dev=md0 ino=3777358
scontext=system_u:system_r:dhcpd_t
tcontext=system_u:object_r:nscd_var_run_t tclass=dir
May 15 00:20:32 atom kernel: audit(1116109232.316:0): avc: denied {
search } for pid=7400 exe=/usr/sbin/dhcpd name=nscd dev=md0 ino=3777358
scontext=system_u:system_r:dhcpd_t
tcontext=system_u:object_r:nscd_var_run_t tclass=dir
-----------------------------------------------
and inode 3777358 is /var/run/nscd directory. so it'd be useful to add
this rule to the dhcpd policy:
allow dhcpd_t nscd_var_run_t:dir search;
yours.
--
Levente "Si vis pacem para bellum!"
More information about the fedora-selinux-list
mailing list