Hi, I need to change selinux-policy in Fedora-16 to allow dhcpd to change owner of /var/lib/dhcpd/*.leases, i.e. the same change as mentioned in bug #737571, comment #12. Previously I was thinking I could solve this in dhcpd, but now I see I need dac_override (see bug #765967). Additional info: type=1400 audit(1324461582.059:4): avc: denied { dac_override } for pid=4524 comm="dhcpd" capability=1 scontext=system_u:system_r:dhcpd_t:s0 tcontext=system_u:system_r:dhcpd_t:s0 tclass=capability
So there is no way try to a solution in Fedora.
(In reply to comment #0) > Hi, > > I need to change selinux-policy in Fedora-16 to allow dhcpd to change owner of > /var/lib/dhcpd/*.leases, i.e. the same change as mentioned in bug #737571, > comment #12. > > Previously I was thinking I could solve this in dhcpd, but now I see I need > dac_override (see bug #765967). > Ok.
ping
Fixed in selinux-policy-3.10.0-72.fc16
selinux-policy-3.10.0-72.fc16 has been submitted as an update for Fedora 16. https://admin.fedoraproject.org/updates/selinux-policy-3.10.0-72.fc16
Package selinux-policy-3.10.0-72.fc16: * should fix your issue, * was pushed to the Fedora 16 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing selinux-policy-3.10.0-72.fc16' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2012-0639/selinux-policy-3.10.0-72.fc16 then log in and leave karma (feedback).
selinux-policy-3.10.0-72.fc16 has been pushed to the Fedora 16 stable repository. If problems still persist, please make note of it in this bug report.