Attachment 317382 Details for Bug 462913 – sealert generated by SAMBA

sealert generated by SAMBA

sealert0811 (text/plain), 2.64 KB, created by John Griffiths on 2008-09-22 16:39:13 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: John Griffiths

Created: 2008-09-22 16:39:13 UTC

Size: 2.64 KB

patch

obsolete

>
>Summary:
>
>SELinux is preventing the samba daemon from reading users' home directories.
>
>Detailed Description:
>
>SELinux has denied the samba daemon access to users' home directories. Someone
>is attempting to access your home directories via your samba daemon. If you only
>setup samba to share non-home directories, this probably signals a intrusion
>attempt. For more information on SELinux integration with samba, look at the
>samba_selinux man page. (man samba_selinux)
>
>Allowing Access:
>
>If you want samba to share home directories you need to turn on the
>samba_enable_home_dirs boolean: "setsebool -P samba_enable_home_dirs=1"
>
>The following command will allow this access:
>
>setsebool -P samba_enable_home_dirs=1
>
>Additional Information:
>
>Source Context                system_u:system_r:smbd_t
>Target Context                unconfined_u:object_r:user_home_dir_t
>Target Objects                /home/jrg3/CodeProjects/SureTrak/trunk/classes/rem
>                              otes/zones/RemoteZoneCircleSet.class [ file ]
>Source                        smbd
>Source Path                   /usr/sbin/smbd
>Port                          <Unknown>
>Host                          elijah.suretrak21.net
>Source RPM Packages           samba-3.0.30-0.fc8
>Target RPM Packages
>Policy RPM                    selinux-policy-3.0.8-111.fc8
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   samba_enable_home_dirs
>Host Name                     elijah.suretrak21.net
>Platform                      Linux elijah.suretrak21.net 2.6.25.10-47.fc8 #1
>                              SMP Mon Jul 7 18:39:51 EDT 2008 i686 i686
>Alert Count                   2
>First Seen                    Mon 11 Aug 2008 01:17:47 PM EDT
>Last Seen                     Mon 11 Aug 2008 01:19:37 PM EDT
>Local ID                      85a0da8f-7129-4e27-bca0-b5b854fc52a3
>Line Numbers
>
>Raw Audit Messages
>
>host=elijah.suretrak21.net type=AVC msg=audit(1218475177.892:134503): avc:  denied  { getattr } for  pid=25575 comm="smbd" path="/home/jrg3/CodeProjects/SureTrak/trunk/classes/remotes/zones/RemoteZoneCircleSet.class" dev=dm-1 ino=2750480 scontext=system_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file
>
>host=elijah.suretrak21.net type=SYSCALL msg=audit(1218475177.892:134503): arch=40000003 syscall=195 success=no exit=-13 a0=bfc575a4 a1=bfc56d24 a2=4c4ff4 a3=bfc56d24 items=0 ppid=4192 pid=25575 auid=4294967295 uid=500 gid=0 euid=500 suid=0 fsuid=500 egid=100 sgid=0 fsgid=100 tty=(none) ses=4294967295 comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null)
>
>

Actions: View

Attachments on bug 462913: 317211 | 317382