My $HOME is (normally) mounted with autofs
via NFS, but with F18 I am seeing this in my audit.log:
type=AVC msg=audit(1345138563.576:2652):
avc: denied { block_suspend } for pid=3708 comm="sssd_nss"
capability=36 scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0
tclass=capability2
I briefly looked for new SE bools with:
# getsebool -a | egrep 'sssd|nss'
authlogin_nsswitch_use_ldap --> off
That one didn't quite sound right, but
I toggled it anyway, but still no luck. To verify basic setup, I
'setenforce 0' and tried ssh again to see if $HOME would be mounted this
time. Still no luck, so as root, I manually tried the mount under
/tmp and that did work, but also generated:
type=AVC msg=audit(1345139104.567:2687):
avc: denied { block_suspend } for pid=4084 comm="rpc.idmapd"
capability=36 scontext=system_u:system_r:rpcd_t:s0 tcontext=system_u:system_r:rpcd_t:s0
tclass=capability2
Known problems or am I overlooking something?
--
John Florian
Machine Data Collections Team