Bug 182290

Summary: "ntlm_auth --help" blocked by selinux-policy-targeted
Product: Red Hat Enterprise Linux 4 Reporter: Ben Levenson <benl>
Component: selinux-policy-targetedAssignee: Daniel Walsh <dwalsh>
Status: CLOSED ERRATA QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: 4.0CC: james.antill, nalin
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: RHBA-2006-0373 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2006-08-10 21:19:50 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 181409    

Description Ben Levenson 2006-02-21 17:27:17 UTC
Description of problem:
"/usr/bin/ntlm_auth --help" doesn't display anything on the controlling
terminal when enforcing=1

Version-Release number of selected component (if applicable):
selinux-policy-targeted-1.17.30-2.110.noarch

Actual results:
Feb 21 11:23:01 axe kernel: audit(1140538981.870:21): avc:  denied  { read write
} for  pid=4125 comm="ntlm_auth" name="1" dev=devpts ino=3
scontext=user_u:system_r:winbind_helper_t
tcontext=user_u:object_r:initrc_devpts_t tclass=chr_file
Feb 21 11:23:01 axe kernel: audit(1140538981.870:22): avc:  denied  { use } for
 pid=4125 comm="ntlm_auth" name="1" dev=devpts ino=3
scontext=user_u:system_r:winbind_helper_t tcontext=user_u:system_r:initrc_t
tclass=fd
Feb 21 11:23:01 axe kernel: audit(1140538981.870:23): avc:  denied  { use } for
 pid=4125 comm="ntlm_auth" name="1" dev=devpts ino=3
scontext=user_u:system_r:winbind_helper_t tcontext=user_u:system_r:initrc_t
tclass=fd
Feb 21 11:23:01 axe kernel: audit(1140538981.870:24): avc:  denied  { use } for
 pid=4125 comm="ntlm_auth" name="1" dev=devpts ino=3
scontext=user_u:system_r:winbind_helper_t tcontext=user_u:system_r:initrc_t
tclass=fd

Comment 1 Daniel Walsh 2006-02-21 17:42:11 UTC
Could you checkout 
ftp://people.redhat.com/dwalsh/SELinux/RHEL4/u3/

selinux-policy-targeted and policycoreutils

It should be fixed there.

Comment 5 David Lawrence 2006-04-18 20:24:10 UTC
NEEDINFO_ENG has been deprecated in favor of NEEDINFO or ASSIGNED. Changing
status to ASSIGNED for ENG review.

Comment 6 James Antill 2006-04-25 17:23:34 UTC
 Is this still a problem, or should this BZ be closed?


Comment 7 Nalin Dahyabhai 2006-04-25 18:07:29 UTC
I can confirm that the problem still manifests as of today on a fully-updated
RHEL 4 system.  FWIW, it appears to work correctly in Raw Hide.

Comment 8 James Antill 2006-04-27 13:54:54 UTC
Fixed in errata: 1.17.30-2.133

Comment 14 Red Hat Bugzilla 2006-08-10 21:19:55 UTC
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHBA-2006-0373.html