FC5 has file contexts for /var/run/slapd.pid and /var/run/slapd.args
# semanage fcontext -l | grep slapd
/var/lib/ldap(/.*)? all files
system_u:object_r:slapd_db_t:s0
/etc/ldap/slapd\.conf regular file
system_u:object_r:slapd_etc_t:s0
/usr/sbin/slapd regular file
system_u:object_r:slapd_exec_t:s0
/var/run/slapd\.args regular file
system_u:object_r:slapd_var_run_t:s0
/var/lib/ldap/replog(/.*)? all files
system_u:object_r:slapd_replog_t:s0
/var/run/slapd\.pid regular file
system_u:object_r:slapd_var_run_t:s0
However, in FC5 the default slapd.conf file puts these files in
/var/run/openldap, so the file contexts don't get set properly, at least
not for the args file:
pidfile /var/run/openldap/slapd.pid
argsfile /var/run/openldap/slapd.args
I've fixed this for now using restorecon but it would be nice for policy
to be fixed. Not sure if it applies to FC4 or not.
Paul.
--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list
