Re: logwatch tries to look at avahi, avahi needs to use winbind

On Wed, 2007-05-02 at 16:25 -0400, Daniel J Walsh wrote:
> Christopher J. PeBenito wrote:
> > On Fri, 2007-04-20 at 14:54 -0400, dwalsh@redhat.com wrote:
> >> --- nsaserefpolicy/policy/modules/services/avahi.te 2007-03-20 23:38:05.000000000 -0400
> >> +++ serefpolicy-2.5.12/policy/modules/services/avahi.te 2007-04-18 16:04:51.000000000 -0400
> >> @@ -105,3 +105,7 @@
> >> optional_policy(`
> >> udev_read_db(avahi_t)
> >> ')
> >> +
> >> +optional_policy(`
> >> + samba_stream_connect_winbind(avahi_t)
> >> +')
> >>
> >
> > Merged except for this last part. I can't find any reference in the
> > avahi code or wiki for it connecting to windbind.
>
> Right, turns out avahi uses nsswitch, and this is causing the avc.
> Attached patch to switch to using nsswitch.

Merged, except I made it unconditional, since I see usage of getpwnam() and getgrnam() in main.c of avahi-daemon.

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.