Description of problem: ypbind is crashing when selinux is enabled. Version-Release number of selected component (if applicable): ypbind-1.31-2.fc13.x86_64 selinux-policy-3.7.8-6.fc13.noarch How reproducible: 100% Steps to Reproduce: 1. service ypbind start 2. service ypbind status 3. Actual results: The service-start takes a while and then claims to be OK, but service-status says "ypbind dead but pid file exists". Expected results: ypbind stays alive and does its job. :) Additional info: From dmesg I see: type=1400 audit(1265236293.793:11424): avc: denied { getsched } for pid=1302 comm="ypbind" scontext=unconfined_u:system_r:ypbind_t:s0 tcontext=unconfined_u:system_r:ypbind_t:s0 tclass=process type=1400 audit(1265236293.793:11425): avc: denied { getsched } for pid=1302 comm="ypbind" scontext=unconfined_u:system_r:ypbind_t:s0 tcontext=unconfined_u:system_r:ypbind_t:s0 tclass=process ypbind[1302] trap int3 ip:3f2dc44292 sp:7f4278afd860 error:0 This was on x86_64. On i686 I get the same failure, with the same two AVCs but not the "trap int3" message. Everything works fine if I: setenforce 0 && service ypbind start && setenforce 1
Shouldn't getsched be allowed for multithreaded programs (ypbind is multithreaded)?
Yes, Sorry we missed this one. Miroslav can you add it.
Fixed in selinux-policy-3.6.32-91.fc12
(In reply to comment #3) > Fixed in selinux-policy-3.6.32-91.fc12 I haven't had any trouble on 12, just on 13. Are you sending a fix there too?
Josh yes Fixed in selinux-policy-3.7.9-1.fc13
selinux-policy-3.6.32-92.fc12 has been submitted as an update for Fedora 12. http://admin.fedoraproject.org/updates/selinux-policy-3.6.32-92.fc12
selinux-policy-3.6.32-92.fc12 has been pushed to the Fedora 12 testing repository. If problems still persist, please make note of it in this bug report. If you want to test the update, you can install it with su -c 'yum --enablerepo=updates-testing update selinux-policy'. You can provide feedback for this update here: http://admin.fedoraproject.org/updates/F12/FEDORA-2010-2953
selinux-policy-3.6.32-92.fc12 has been pushed to the Fedora 12 stable repository. If problems still persist, please make note of it in this bug report.