Bug 1393859 - policy to allow CTDB make Samba run
Summary: policy to allow CTDB make Samba run
Keywords:
Status: CLOSED INSUFFICIENT_DATA
Alias: None
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: selinux-policy
Version: 7.2
Hardware: x86_64
OS: Linux
medium
high
Target Milestone: rc
: ---
Assignee: Lukas Vrabec
QA Contact: Milos Malik
URL:
Whiteboard:
Depends On:
Blocks: 1394210
TreeView+ depends on / blocked
 
Reported: 2016-11-10 13:40 UTC by lejeczek
Modified: 2021-08-11 11:57 UTC (History)
7 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
: 1394210 (view as bug list)
Environment:
Last Closed: 2018-04-29 14:45:03 UTC
Target Upstream Version:

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Description lejeczek 2016-11-10 13:40:42 UTC 
Description of problem:

after consulting selinux@list it was suggested to me that I should file this request here:

...
> maybe I'll describe set of circumstances/settings (or maybe just one
> setting) that should help you to reproduce this selinux problem?
> I'll start with - Centos 7.2 +
> selinux-policy-targeted-3.13.1-60.el7_2.9.noarch and then you want in
> your /etc/sysconfig/ctdb CTDB_MANAGES_SAMBA=yes which means that ctdb
> would be managing smb daemons. - you should see ctdb being unable to
> copy smb.conf (during startup) and then to access cups and maybe some more.

Ok it makes sense to have these rules in the distribution policy.
....

many thanks

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:
Comment 3 Lukas Vrabec 2017-10-25 16:44:46 UTC 
Milos, 

Is this issue still valid?
Comment 4 Milos Malik 2017-10-25 17:03:21 UTC 
Our TC did not trigger any SELinux denials when executed on RHEL-7.4 machine with the latest selinux-policy, but the TC does not exercise CUPS in any way.

Please attach SELinux denials that you encountered in described scenario. We want to make sure that all relevant SELinux denials are fixed.
Comment 6 Lukas Vrabec 2018-04-29 14:45:03 UTC 
Based on no response. Closing this ticket. If you're still facing this issue feel free to re-open this bugzilla. 

Thanks,
Lukas.
Comment 7 lejeczek 2021-08-11 11:57:53 UTC 
ok
Note You need to log in before you can comment on or make changes to this bug.