Bug 176963

Summary: ntpd and samba's winbind can't run together
Product: Red Hat Enterprise Linux 4 Reporter: Levente Farkas <lfarkas>
Component: selinux-policy-targetedAssignee: Russell Coker <rcoker>
Status: CLOSED CURRENTRELEASE QA Contact:
Severity: high Docs Contact:
Priority: medium    
Version: 4.0CC: dwalsh
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: 1.17.30-2.124 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2006-04-13 09:18:05 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Levente Farkas 2006-01-04 19:48:14 UTC
Description of problem:
when use ntpd and samba's winbind together we've got the following error:
Jan  4 17:10:06 piros kernel: audit(1136391006.739:8): avc:  denied  {
connectto } for  pid=28435 comm="ntpd" name="pipe"
scontext=root:system_r:ntpd_t tcontext=root:system_r:winbind_t
tclass=unix_stream_socket
Jan  4 17:12:06 piros kernel: audit(1136391126.439:10): avc:  denied  {
search } for  pid=31167 comm="ntpd" name="samba" dev=md1 ino=3940971
scontext=root:system_r:ntpd_t tcontext=system_u:object_r:samba_var_t
tclass=dir 

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.
  
Actual results:


Expected results:
allow ntpd_t winbind_t:unix_stream_socket connectto;
allow ntpd_t samba_var_t:dir search; 
solve the problem (but probably a more precise solution exist).

Additional info:

Comment 1 Daniel Walsh 2006-01-05 14:35:06 UTC
Fixed in selinux-policy-targeted-1.17.30-2.124