Amanda client AVC

[Matthew Saltzman]

On Thu, 6 Apr 2006, Stephen Smalley wrote:

> On Wed, 2006-04-05 at 18:42 -0400, Matthew Saltzman wrote:
>> My amanda clients are seeing the following:
>>
>>      kernel: audit(1144217150.855:17): avc:  denied  { name_bind } for
>>      pid=3707 comm="sendbackup" src=697
>>      scontext=system_u:system_r:amanda_t:s0
>>      tcontext=system_u:object_r:reserved_port_t:s0 tclass=tcp_socket
>>
>> And they don't work.
>>
>> How to fix, please?  TIA.
>
> port 697 is listed as uuidgen in /etc/services, so specifically mapping
> it to an amanda port type and allowing amanda to bind to it seems wrong.
> If this is just a result of probing for any available low port for NIS,
> then the allow_ypbind boolean is likely relevant; try enabling it.

That stops the denial messages, but Amanda still isn't working.  It fails 
with "too many dumper retry".  I'm not getting denials, though, so I 
suppose that must be something else?

(Running nscd doesn't seem to help matters.)

Also, this seems strange as a solution as this network doesn't run NIS.  I 
do have all the amanda-related ports open on both server and client.  I 
had no problems running amanda under FC4.  My server is FC4 and it backs 
itself and an RH7.3 machine up with no problems.  Only my FC5 clients have 
issues.

-- 
 		Matthew Saltzman

Clemson University Math Sciences
mjs AT clemson DOT edu
http://www.math.clemson.edu/~mjs