From: sven.vermeulen@siphos.be (Sven Vermeulen)
Date: Sat, 17 Aug 2013 10:24:04 +0200
Subject: [refpolicy] [PATCH 2/2] Use nscd socket for webalizer
In-Reply-To: <1376652018.3531.2.camel@d30>
References: <1376634106-16328-1-git-send-email-sven.vermeulen@siphos.be>
	<1376634106-16328-3-git-send-email-sven.vermeulen@siphos.be>
	<1376652018.3531.2.camel@d30>
Message-ID: <20130817082404.GA32122@siphos.be>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On Fri, Aug 16, 2013 at 01:20:18PM +0200, Dominick Grift wrote:
> On Fri, 2013-08-16 at 08:21 +0200, Sven Vermeulen wrote:
> > The webalizer application accesses the nscd service to optimize DNS queries.
> 
> There is a boolean for that "nscd_use_shm" (also applies to webalizer)
> 
> nscd clients either use shm or socket
> 
> can you use audit2why on that avc denial to see if it suggests toggling
> the boolean?

Indeed, my bad. I should've known better.

Wkr,
	Sven Vermeulen