Bug 169164

Summary:	separate /var/lib/{dhcpd,dhclient} directories for improved SELinux policy
Product:	[Fedora] Fedora	Reporter:	Jason Vas Dias <jvdias>
Component:	dhcp	Assignee:	Jason Vas Dias <jvdias>
Status:	CLOSED RAWHIDE	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	rawhide	CC:	dwalsh, notting, scop
Target Milestone:	---	Keywords:	FutureFeature
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Enhancement
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2005-11-28 19:45:16 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	150221

Description Jason Vas Dias 2005-09-23 20:39:02 UTC

Description of problem:

Make dhcpd use /var/lib/dhcpd/dhcpd.leases, and dhclient use
/var/lib/dhclient/dhclient*.leases, to permit improved SELinux
policy, at the request of the SELinux maintainer. 

Version-Release number of selected component (if applicable):
dhcp-3.0.3-6(-)

Comment 1 Jason Vas Dias 2005-09-23 21:25:27 UTC

This is now done with dhcp-3.0.3-7, in rawhide-20050924 - 
dhclient uses /var/lib/dhclient/dhclient.leases by default,
and dhcpd uses /var/lib/dhcpd/dhcpd.leases by default.

The DEFAULT location of dhclient.leases is now /var/lib/dhclient/dhclient.leases.
Note that this will require an initscripts change to take effect:
  /etc/sysconfig/network-scripts/ifup-eth, line 163:
      DHCLIENTARGS=...-lf /var/lib/dhcp/dhclient-${DEVICE}.leases
  should be:
      DHCLIENTARGS=...-lf /var/lib/dhclient/dhclient-${DEVICE}.leases

  /etc/sysconfig/network-scripts/ifdown-eth, line 63:
      /sbin/dhclient ... -lf /var/lib/dhcp/dhclient-${DEVICE}.leases
  should be:
      /sbin/dhclient ... -lf /var/lib/dhclient/dhclient-${DEVICE}.leases

Also 'dhcdbd' will have to be changed to use the new dhclient.leases file.

dhcpd is now OK with using the /var/lib/dhcpd/dhcpd.leases file, but this 
won't work with SELinux in Enforcing mode until the new SELinux policy is in.

Comment 2 Ville Skyttä 2005-11-27 23:34:49 UTC

ifup-eth and ifdown-eth still point to the old (wrong) location for dhclient
leases in FC5test1, initscripts-8.17-1.

Comment 3 Bill Nottingham 2005-11-28 19:45:16 UTC

Added, will be in 8.18-1.