From Bugzilla Helper: User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.7) Gecko/20050416 Fedora/1.0.3-2 Firefox/1.0.3 Description of problem: Samba denials, generated by connecting from a windows machine. Port 631 is CUPS - it's probably trying to list attached printers. audit(1115733990.111:0): avc: denied { connect } for scontext=system_u:system_r:smbd_t tcontext=system_u:system_r:smbd_t tclass=tcp_socket audit(1115733990.111:0): avc: denied { name_connect } for dest=631 scontext=system_u:system_r:smbd_t tcontext=system_u:object_r:ipp_port_t tclass=tcp_socket Version-Release number of selected component (if applicable): selinux-policy-strict-1.23.15-1 How reproducible: Didn't try Steps to Reproduce: Additional info:
Are you running NIS without allow_ypbind running? Why would snmp be attempting to connect to ipp_port?
I don't use NIS. This is smbd, not snmp - I think it's just trying to deal with the [printers] share, so it contacts CUPS.
Sorry misread. Ok I will add perms to allow this? We used to see apps trying to connect to lpp port all the time when portmap would return it. Fixed in policy 1.23.15-4