Attachment 589712 Details for Bug 829138 – File: description

File: description

description (text/plain), 2.30 KB, created by Rafal Boruc on 2012-06-06 04:59:53 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Rafal Boruc

Created: 2012-06-06 04:59:53 UTC

Size: 2.30 KB

patch

obsolete

>SELinux is preventing system-config-s from 'unlink' accesses on the file /etc/samba/smb.conf.
>
>*****  Plugin restorecon (99.5 confidence) suggests  *************************
>
>If aby naprawiÄ etykietÄ. 
>domyÅlna etykieta /etc/samba/smb.conf powinna wynosiÄ samba_etc_t.
>Then moÅ¼na wykonaÄ polecenie restorecon.
>Do
># /sbin/restorecon -v /etc/samba/smb.conf
>
>*****  Plugin catchall (1.49 confidence) suggests  ***************************
>
>If aby system-config-s powinno mieÄ domyÅlnie unlink dostÄp do smb.conf file.
>Then proszÄ to zgÅosiÄ jako bÅÄd.
>MoÅ¼na utworzyÄ lokalny moduÅ polityki, aby umoÅ¼liwiÄ ten dostÄp.
>Do
>moÅ¼na tymczasowo zezwoliÄ na ten dostÄp wykonujÄc polecenia:
># grep system-config-s /var/log/audit/audit.log | audit2allow -M mojapolityka
># semodule -i mojapolityka.pp
>
>Additional Information:
>Source Context                system_u:system_r:sambagui_t:s0-s0:c0.c1023
>Target Context                unconfined_u:object_r:user_home_t:s0
>Target Objects                /etc/samba/smb.conf [ file ]
>Source                        system-config-s
>Source Path                   system-config-s
>Port                          <Nieznane>
>Host                          (removed)
>Source RPM Packages           
>Target RPM Packages           samba-common-3.6.5-86.fc17.1.i686
>Policy RPM                    selinux-policy-3.10.0-128.fc17.noarch
>Selinux Enabled               True
>Policy Type                   targeted
>Enforcing Mode                Enforcing
>Host Name                     (removed)
>Platform                      Linux (removed) 3.3.5-2.fc16.i686 #1 SMP Tue May 8
>                              12:04:02 UTC 2012 i686 i686
>Alert Count                   1
>First Seen                    Åro, 6 cze 2012, 04:46:02
>Last Seen                     Åro, 6 cze 2012, 04:46:02
>Local ID                      fbf21787-d72c-41af-9c41-3ce0b1ebcb70
>
>Raw Audit Messages
>type=AVC msg=audit(1338954362.342:82): avc:  denied  { unlink } for  pid=2800 comm="system-config-s" name="smb.conf" dev="dm-1" ino=268559 scontext=system_u:system_r:sambagui_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file
>
>
>Hash: system-config-s,sambagui_t,user_home_t,file,unlink
>
>audit2allowunable to open /sys/fs/selinux/policy:  Permission denied
>
>
>audit2allow -Runable to open /sys/fs/selinux/policy:  Permission denied
>
>

Actions: View

Attachments on bug 829138: 589712