dhcpd and nscd bug

[Daniel J Walsh]

Farkas Levente wrote:

> hi,
> it seems that during startup dhcpd server try to read nscd's pid files 
> (i don't know why?):
> -----------------------------------------------
> May 15 00:20:32 atom kernel: audit(1116109232.315:0): avc:  denied  { 
> search } for  pid=7400 exe=/usr/sbin/dhcpd name=nscd dev=md0 
> ino=3777358 scontext=system_u:system_r:dhcpd_t 
> tcontext=system_u:object_r:nscd_var_run_t tclass=dir
> May 15 00:20:32 atom kernel: audit(1116109232.316:0): avc:  denied  { 
> search } for  pid=7400 exe=/usr/sbin/dhcpd name=nscd dev=md0 
> ino=3777358 scontext=system_u:system_r:dhcpd_t 
> tcontext=system_u:object_r:nscd_var_run_t tclass=dir
> -----------------------------------------------
> and inode 3777358 is /var/run/nscd directory. so it'd be useful to add 
> this rule to the dhcpd policy:
> allow dhcpd_t nscd_var_run_t:dir search;
> yours.
>
Change policy to fix this in selinux-policy-targeted-1.23.16-2

--