[gentoo-hardened] [selinux] empty ntpd.pid

[Richard Simpson]

Greetings:

I'm trying to install ntpd on an selinux-enabled gentoo system, and one of
the stranger problems I'm having is with /var/run/ntpd.pid. The file is
being created with a context of initrc_var_run_t, but the pid is never
written to the file. I get an avc denial and a log entry from ntpd about not
being able to access the pid file. The ntpd.te policy expects this file to
have a context of ntpd_var_run_t. I see that the /etc/init.d/ntpd script
creates the empty ntpd.pid because it wants to `chown ntp:ntp` before it
starts the daemon, ergo the initrc_var_run_t context. Is this a correct
behavior? Solutions?

Thanks,
Richard Simpson


--
gentoo-hardened@g.o mailing list