|Summary:||samba logfile warning|
|Product:||[Fedora] Fedora||Reporter:||Dave Jones <davej>|
|Component:||selinux-policy-targeted||Assignee:||Daniel Walsh <dwalsh>|
|Status:||CLOSED CURRENTRELEASE||QA Contact:||Ben Levenson <benl>|
|Fixed In Version:||Current||Doc Type:||Bug Fix|
|Doc Text:||Story Points:||---|
|Last Closed:||2007-08-22 14:09:23 UTC||Type:||---|
|oVirt Team:||---||RHEL 7.3 requirements from Atomic Host:|
Description Dave Jones 2007-07-05 21:20:47 UTC
SELinux is preventing samba (/usr/sbin/smbd) "append" to 192.168.42.19.log (samba_log_t). SELinux denied samba access to 192.168.42.19.log. If you want to share this directory with samba it has to have a file context label of samba_share_t. If you did not intend to use 192.168.42.19.log as a samba repository it could indicate either a bug or it could signal a intrusion attempt. This is odd. I'm not trying to share /var/log/samba/192.168.42.19.log , so afaics, it's correctly labelled already.. (17:16:22:root@gelk:samba)# ll -Z 192.168.42.19.log -rw-r--r-- root root system_u:object_r:samba_log_t 192.168.42.19.log Hmm, there is some discrepancy though between this and other files in that dir.. -rw-r--r-- root root system_u:object_r:samba_log_t 192.168.42.19.log -rw-r--r-- root root user_u:object_r:samba_log_t 192.168.42.20.log Not sure why samba keeps trying to bother with this file at all, that host hasn't been switched on for about a month.
Comment 1 Daniel Walsh 2007-07-06 14:47:20 UTC
What policy are you seeing this with? It should be fixed by the latest policy? selinux-policy-2.6.4-26
Comment 2 Dave Jones 2007-07-15 21:33:16 UTC
haven't seen it happen since updating to that version, but will keep an eye open for it.
Comment 3 Daniel Walsh 2007-08-22 14:09:23 UTC
Closing as fixes are in the current release