Bug 182290 - "ntlm_auth --help" blocked by selinux-policy-targeted
Summary: "ntlm_auth --help" blocked by selinux-policy-targeted
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 4
Classification: Red Hat
Component: selinux-policy-targeted
Version: 4.0
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
: ---
Assignee: Daniel Walsh
QA Contact:
URL:
Whiteboard:
Keywords:
Depends On:
Blocks: 181409
TreeView+ depends on / blocked
 
Reported: 2006-02-21 17:27 UTC by Ben Levenson
Modified: 2007-11-30 22:07 UTC (History)
2 users (show)

(edit)
Clone Of:
(edit)
Last Closed: 2006-08-10 21:19:50 UTC


Attachments (Terms of Use)


External Trackers
Tracker ID Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2006:0373 normal SHIPPED_LIVE selinux-policy bug fix update 2006-08-09 04:00:00 UTC

Description Ben Levenson 2006-02-21 17:27:17 UTC
Description of problem:
"/usr/bin/ntlm_auth --help" doesn't display anything on the controlling
terminal when enforcing=1

Version-Release number of selected component (if applicable):
selinux-policy-targeted-1.17.30-2.110.noarch

Actual results:
Feb 21 11:23:01 axe kernel: audit(1140538981.870:21): avc:  denied  { read write
} for  pid=4125 comm="ntlm_auth" name="1" dev=devpts ino=3
scontext=user_u:system_r:winbind_helper_t
tcontext=user_u:object_r:initrc_devpts_t tclass=chr_file
Feb 21 11:23:01 axe kernel: audit(1140538981.870:22): avc:  denied  { use } for
 pid=4125 comm="ntlm_auth" name="1" dev=devpts ino=3
scontext=user_u:system_r:winbind_helper_t tcontext=user_u:system_r:initrc_t
tclass=fd
Feb 21 11:23:01 axe kernel: audit(1140538981.870:23): avc:  denied  { use } for
 pid=4125 comm="ntlm_auth" name="1" dev=devpts ino=3
scontext=user_u:system_r:winbind_helper_t tcontext=user_u:system_r:initrc_t
tclass=fd
Feb 21 11:23:01 axe kernel: audit(1140538981.870:24): avc:  denied  { use } for
 pid=4125 comm="ntlm_auth" name="1" dev=devpts ino=3
scontext=user_u:system_r:winbind_helper_t tcontext=user_u:system_r:initrc_t
tclass=fd

Comment 1 Daniel Walsh 2006-02-21 17:42:11 UTC
Could you checkout 
ftp://people.redhat.com/dwalsh/SELinux/RHEL4/u3/

selinux-policy-targeted and policycoreutils

It should be fixed there.

Comment 5 David Lawrence 2006-04-18 20:24:10 UTC
NEEDINFO_ENG has been deprecated in favor of NEEDINFO or ASSIGNED. Changing
status to ASSIGNED for ENG review.

Comment 6 James Antill 2006-04-25 17:23:34 UTC
 Is this still a problem, or should this BZ be closed?


Comment 7 Nalin Dahyabhai 2006-04-25 18:07:29 UTC
I can confirm that the problem still manifests as of today on a fully-updated
RHEL 4 system.  FWIW, it appears to work correctly in Raw Hide.

Comment 8 James Antill 2006-04-27 13:54:54 UTC
Fixed in errata: 1.17.30-2.133

Comment 14 Red Hat Bugzilla 2006-08-10 21:19:55 UTC
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHBA-2006-0373.html



Note You need to log in before you can comment on or make changes to this bug.