Bug 247195

Summary:	samba logfile warning
Product:	[Fedora] Fedora	Reporter:	Dave Jones <davej>
Component:	selinux-policy-targeted	Assignee:	Daniel Walsh <dwalsh>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Ben Levenson <benl>
Severity:	low	Docs Contact:
Priority:	low
Version:	7	CC:	pfrields
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	Current	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2007-08-22 14:09:23 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Dave Jones 2007-07-05 21:20:47 UTC

SELinux is preventing samba (/usr/sbin/smbd) "append" to 192.168.42.19.log
(samba_log_t).

SELinux denied samba access to 192.168.42.19.log. If you want to share this
directory with samba it has to have a file context label of samba_share_t. If
you did not intend to use 192.168.42.19.log as a samba repository it could
indicate either a bug or it could signal a intrusion attempt.

This is odd.
I'm not trying to share /var/log/samba/192.168.42.19.log , so afaics, it's
correctly labelled already..

(17:16:22:root@gelk:samba)# ll -Z 192.168.42.19.log 
-rw-r--r--  root root system_u:object_r:samba_log_t    192.168.42.19.log

Hmm, there is some discrepancy though between this and other files in that dir..

-rw-r--r--  root root system_u:object_r:samba_log_t    192.168.42.19.log
-rw-r--r--  root root user_u:object_r:samba_log_t      192.168.42.20.log

Not sure why samba keeps trying to bother with this file at all, that host
hasn't been switched on for about a month.

Comment 1 Daniel Walsh 2007-07-06 14:47:20 UTC

What policy are you seeing this with?

It should be fixed by the latest policy?  selinux-policy-2.6.4-26

Comment 2 Dave Jones 2007-07-15 21:33:16 UTC

haven't seen it happen since updating to that version, but will keep an eye open
for it.

Comment 3 Daniel Walsh 2007-08-22 14:09:23 UTC

Closing as fixes are in the current release