Bug 247195

Summary: samba logfile warning
Product: [Fedora] Fedora Reporter: Dave Jones <davej>
Component: selinux-policy-targetedAssignee: Daniel Walsh <dwalsh>
Status: CLOSED CURRENTRELEASE QA Contact: Ben Levenson <benl>
Severity: low Docs Contact:
Priority: low    
Version: 7CC: pfrields
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Current Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2007-08-22 14:09:23 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Description Dave Jones 2007-07-05 21:20:47 UTC
SELinux is preventing samba (/usr/sbin/smbd) "append" to 192.168.42.19.log
(samba_log_t).

SELinux denied samba access to 192.168.42.19.log. If you want to share this
directory with samba it has to have a file context label of samba_share_t. If
you did not intend to use 192.168.42.19.log as a samba repository it could
indicate either a bug or it could signal a intrusion attempt.

This is odd.
I'm not trying to share /var/log/samba/192.168.42.19.log , so afaics, it's
correctly labelled already..

(17:16:22:root@gelk:samba)# ll -Z 192.168.42.19.log 
-rw-r--r--  root root system_u:object_r:samba_log_t    192.168.42.19.log

Hmm, there is some discrepancy though between this and other files in that dir..

-rw-r--r--  root root system_u:object_r:samba_log_t    192.168.42.19.log
-rw-r--r--  root root user_u:object_r:samba_log_t      192.168.42.20.log

Not sure why samba keeps trying to bother with this file at all, that host
hasn't been switched on for about a month.

Comment 1 Daniel Walsh 2007-07-06 14:47:20 UTC
What policy are you seeing this with?

It should be fixed by the latest policy?  selinux-policy-2.6.4-26

Comment 2 Dave Jones 2007-07-15 21:33:16 UTC
haven't seen it happen since updating to that version, but will keep an eye open
for it.

Comment 3 Daniel Walsh 2007-08-22 14:09:23 UTC
Closing as fixes are in the current release