Don't start AVC thread until credentials are installed

diff --git a/ChangeLog b/ChangeLog
index 28b9a43ef817be4e3483ff5761c493024ae93747..a65182acf94b905bfaaabf56918f2e247ce97245 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,5 +1,8 @@
 2011-11-03  Andreas Schwab  <schwab@redhat.com>
 
+       * nscd/nscd.c (main): Don't start AVC thread until credentials are
+       installed.
+
        * nss/makedb.c (set_file_creation_context): Do nothing if SELinux
        is disabled.
 

diff --git a/nscd/nscd.c b/nscd/nscd.c
index e9bb75d3e941ab49f22644f6f7a5fb1f2cafdb5a..be693c9d5c57f9b5081657be7cad2909780b3c48 100644 (file)
--- a/nscd/nscd.c
+++ b/nscd/nscd.c
@@ -263,10 +263,6 @@ main (int argc, char **argv)
     /* In foreground mode we are not paranoid.  */
     paranoia = 0;
 
-  /* Start the SELinux AVC.  */
-  if (selinux_enabled)
-    nscd_avc_init ();
-
   signal (SIGINT, termination_handler);
   signal (SIGQUIT, termination_handler);
   signal (SIGTERM, termination_handler);
@@ -294,6 +290,10 @@ main (int argc, char **argv)
   /* Init databases.  */
   nscd_init ();
 
+  /* Start the SELinux AVC.  */
+  if (selinux_enabled)
+    nscd_avc_init ();
+
   /* Handle incoming requests */
   start_threads ();