[CentOS] selinux contexts for openntpd portable

Wed Feb 8 16:24:38 UTC 2017
Jordan Ladora <vicepresjoebiden at gmail.com>

I was wondering if someone could help with selinux context for the portable
openntpd library on centos7.

I compiled openntpd-6.0p1 and it runs great on centos7, but have not had
much luck with selinux contexts for it.

This is what I tried-

semanage fcontext -a -t ntp_conf_t /usr/local/etc/ntpd.conf  # seems to work
semanage fcontext -a -t ntpd_exec_t /usr/local/sbin/ntpd    # gets reset on
reboot to bin_t and/or stops ntpd from working
semanage fcontext -a -t ntpd_exec_t /usr/local/sbin/ntpctl    # stops ntpd
from working
semanage fcontext -a -t ntp_drift_t /usr/local/var/db/ntpd.drift   # seems
ok

No idea about context for /usr/local/var/db/ntpd.sock

Thanks in advance for any help,
jl