Bug 456910

Summary:	portage_t and openrc_cgroup_release_t don't have access to /run/nscd/socket
Product:	Gentoo Linux	Reporter:	Mira Ressel <aranea>
Component:	SELinux	Assignee:	Sven Vermeulen (RETIRED) <swift>
Status:	VERIFIED FIXED
Severity:	normal	CC:	selinux
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	sec-policy r12
Package list:		Runtime testing required:	---

Description Mira Ressel 2013-02-12 10:47:03 UTC

Processes running as portage_t or openrc_cgroup_release_t don't have access to /run/nscd/socket. This doesn't look like a security gain, so they should be granted either nscd_socket_use() or auth_use_nsswitch().

Comment 1 Sven Vermeulen (RETIRED) gentoo-dev

2013-02-12 19:15:49 UTC

Fixed in repository and will be in rev 12.
Also, openrc now depends on selinux-openrc if USE="selinux"

Comment 2 Sven Vermeulen (RETIRED) gentoo-dev

2013-03-09 12:41:26 UTC

rev 12 in main tree, ~arch'ed

Comment 3 Sven Vermeulen (RETIRED) gentoo-dev

2013-03-29 10:55:10 UTC

stabilized