Description of problem: The nscd deamon will not start. 'service nscd start' always returns 'Failed.' /var/log/messages contains the following: Oct 18 15:19:27 rk-build kernel: audit(1098127167.962:0): avc: denied { search } for pid=5836 exe=/usr/sbin/nscd name=selinux dev=dm-0 ino=4006603 scontext=root:system_r:nscd_t tcontext=system_u:object_r:selinux_config_t tclass=dir Oct 18 15:19:27 rk-build kernel: audit(1098127167.962:0): avc: denied { read } for pid=5836 exe=/usr/sbin/nscd name=mounts dev=proc ino=382468112 scontext=root:system_r:nscd_t tcontext=root:system_r:nscd_t tclass=file Oct 18 15:19:27 rk-build kernel: audit(1098127167.962:0): avc: denied { read } for pid=5836 exe=/usr/sbin/nscd name=filesystems dev=proc ino=-268435451 scontext=root:system_r:nscd_t tcontext=system_u:object_r:proc_t tclass=file Oct 18 15:19:27 rk-build nscd: 5836: Failed to determine if kernel supports SELinux Oct 18 15:19:27 rk-build nscd: nscd startup failed Version-Release number of selected component (if applicable): glibc-2.3.3-53
Please retry with RHEL4 b2 glibc/selinux-policy-targeted/nscd (or grab the latest ones from rawhide). They certainly work with SELinux.
I upgraded to selinux-policy-targeted-1.17.30-2.6 and glibc*-2.3.3-70 from the fedora development tree and nscd does work now.
Thanks. Given that 2.3.3-70 (or 2.3.3-73) and that selinux-policy-targeted will be included in RHEL4 b2, I'm closing this.