getpwnam and SELinux

[Brian Ginn <BGinn symark com>]

I have an app that I'm trying to confine.

 

In enforcing mode, getpwnam() returns "X" for the pw_passwd field.

 

Is there SELinux policy to allow this app to get the shadow passwd?

I've tried the following without success:

auth_can_read_shadow_passwords(  )

auth_read_shadow(  )

auth_tunable_read_shadow(  )

auth_use_nsswitch(  )

 

Thanks,

Brian