FC5 dbus-deamon name_connect denied

[Daniel J Walsh]

Tim Fenn wrote:
> After upgrading from FC4 to FC5, everything seems to be working well,
> except for the dbus-daemon.  It hogs CPU and continuously spits out
> the following, unless messagebus is stopped:
>
> audit(1143051102.334:1219773): avc: denied { name_connect } for
> pid=24150 comm="dbus-daemon" dest=111
> scontext=user_u:system_r:system_dbusd_t:s0
> tcontext=system_u:object_r:portmap_port_t:s0 tclass=tcp_socket
>
> audit(1143051102.334:1219773): arch=40000003 syscall=102 success=no
> exit=-13 a0=3 a1=bfa7fbec a2=da4ff4 a3=0 items=0 pid=24150 auid=1567
> uid=81 gid=81 euid=81 suid=81 fsuid=81 egid=81 sgid=81 fsgid=81
> comm="dbus-daemon" exe="/bin/dbus-daemon"
>
> audit(1143051102.334:1219773): saddr=0200006F7F00000168C56709C0916700
> audit(1143051102.334:1219773): nargs=3 a0=c a1=bfa7fcfc a2=10
>
> I'm sure I missed something simple (as usual).  Any hints?
>
> If it helps, I'm using:
>
> selinux-policy-2.2.23-15
> selinux-policy-targeted-2.2.23-15
>
> Thanks for any pointers,
> Tim
>
> --
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
>   
Are you running on an NIS machine? If yes is the allow_ypbind boolean 
turned on?

getsebool allow_ypbind

If not turn it on

setsebool -P allow_ypbind=1

Dan