Red Hat Bugzilla – Bug 247195
samba logfile warning
Last modified: 2015-01-04 17:29:50 EST
SELinux is preventing samba (/usr/sbin/smbd) "append" to 192.168.42.19.log (samba_log_t). SELinux denied samba access to 192.168.42.19.log. If you want to share this directory with samba it has to have a file context label of samba_share_t. If you did not intend to use 192.168.42.19.log as a samba repository it could indicate either a bug or it could signal a intrusion attempt. This is odd. I'm not trying to share /var/log/samba/192.168.42.19.log , so afaics, it's correctly labelled already.. (17:16:22:root@gelk:samba)# ll -Z 192.168.42.19.log -rw-r--r-- root root system_u:object_r:samba_log_t 192.168.42.19.log Hmm, there is some discrepancy though between this and other files in that dir.. -rw-r--r-- root root system_u:object_r:samba_log_t 192.168.42.19.log -rw-r--r-- root root user_u:object_r:samba_log_t 192.168.42.20.log Not sure why samba keeps trying to bother with this file at all, that host hasn't been switched on for about a month.
What policy are you seeing this with? It should be fixed by the latest policy? selinux-policy-2.6.4-26
haven't seen it happen since updating to that version, but will keep an eye open for it.
Closing as fixes are in the current release