Summary:

SELinux is preventing /usr/sbin/dhcpd from binding to port 20364.

Detailed Description:

[SELinux is in permissive mode. This access was not denied.]

SELinux has denied the dhcpd from binding to a network port 20364 which does not
have an SELinux type associated with it. If dhcpd should be allowed to listen on
20364, use the semanage command to assign 20364 to a port type that dhcpd_t can
bind to (pxe_port_t, dhcpd_port_t).
If dhcpd is not supposed to bind to 20364, this could signal an intrusion
attempt.

Allowing Access:

If you want to allow dhcpd to bind to port 20364, you can execute
# semanage port -a -t PORT_TYPE -p udp 20364
where PORT_TYPE is one of the following: pxe_port_t, dhcpd_port_t.
If this system is running as an NIS Client, turning on the allow_ypbind boolean
may fix the problem. setsebool -P allow_ypbind=1.

Additional Information:

Source Context                unconfined_u:system_r:dhcpd_t:s0
Target Context                system_u:object_r:port_t:s0
Target Objects                None [ udp_socket ]
Source                        dhcpd
Source Path                   /usr/sbin/dhcpd
Port                          20364
Host                          (removed)
Source RPM Packages           dhcp-4.2.0-12.fc14
Target RPM Packages           
Policy RPM                    selinux-policy-3.9.7-3.fc14
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Permissive
Plugin Name                   bind_ports
Host Name                     (removed)
Platform                      Linux (removed) 2.6.35.6-43.fc14.x86_64 #1 SMP Wed Oct
                              13 21:23:02 UTC 2010 x86_64 x86_64
Alert Count                   4
First Seen                    Sat 16 Oct 2010 10:16:44 PM WST
Last Seen                     Sat 16 Oct 2010 10:26:53 PM WST
Local ID                      866f4bd9-bfd4-4d6a-bfff-11d1a64ed5cf
Line Numbers                  

Raw Audit Messages            

node=(removed) type=AVC msg=audit(1287239213.448:78): avc:  denied  { name_bind } for  pid=3641 comm="dhcpd" src=20364 scontext=unconfined_u:system_r:dhcpd_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=udp_socket

node=(removed) type=SYSCALL msg=audit(1287239213.448:78): arch=c000003e syscall=49 success=yes exit=0 a0=14 a1=7fff6d3b1240 a2=10 a3=7fff6d3b0e24 items=0 ppid=3640 pid=3641 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=1 comm="dhcpd" exe="/usr/sbin/dhcpd" subj=unconfined_u:system_r:dhcpd_t:s0 key=(null)



Hash String generated from  bind_ports,dhcpd,dhcpd_t,port_t,udp_socket,name_bind
audit2allow suggests:

#============= dhcpd_t ==============
#!!!! This avc can be allowed using the boolean 'allow_ypbind'

allow dhcpd_t port_t:udp_socket name_bind;