Problem with SELinux and NIS

[Tony Molloy]

Hi,

My test system runs FC4 updated to the latest rpm's as of today. I'm 
trying to get SELinux working and am having a slight problem

I've gotten nfs, samba and ntpd working OK, but I have a problem with NIS 
running yppasswd to set passwords.

With SELinux disabled it work's, with SELinux enabled, in enforcing mode 
and targetted policy it doesn't.

The errors I get are as follows:

/var/log/messages ( edited )

beta rpc.yppasswdd[1778]: update testacc1 (uid=9001) from host 
10.220.1.151 failed
beta rpc.yppasswdd[1778]: password file locked
                                        ^^^^^^^^^^^^^^^^^^^^

/var/log/audit/audit.log

type=PATH msg=audit(1120732794.982:341722): item=0 name="/etc/.pwd.lock" 
flags=310  inode=62249 dev=03:01 mode=040755 ouid=0 ogid=0 rdev=00:00

type=Unknown msg=audit(1120732794.982:341722):  cwd="/"

type=SYSCALL msg=audit(1120732794.982:341722): arch=40000003 syscall=5 
success=no exit=-13 a0=acf181 a1=41 a2=180 a3=ffffffff items=1 pid=1778 
auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 
comm="rpc.yppasswdd" exe="/usr/sbin/rpc.yppasswdd"

type=AVC msg=audit(1120732794.982:341722): avc:  denied  { write } for  
pid=1778 comm="rpc.yppasswdd" name=".pwd.lock" dev=hda1 ino=62391 
scontext=system_u:system_r:rpcd_t tcontext=system_u:object_r:shadow_t 
tclass=file

So it seems that SELinux is denying rpc.yppasswdd writing 
to /etc/.pwd.lock

How do I allow it to write to that file.

Thank's in advance

Tony

-- 


Tony Molloy.

Dept. of Comp. Sci.
University of Limerick