Summary:

SELinux is preventing Samba (/usr/sbin/smbd) "getattr" access to /proc/fs/nfsd.

Detailed Description:

[SELinux is in permissive mode. This access was not denied.]

SELinux denied samba access to /proc/fs/nfsd. If you want to share this
directory with samba it has to have a file context label of samba_share_t. If
you did not intend to use /proc/fs/nfsd as a samba repository it could indicate
either a bug or it could signal a intrusion attempt. Please refer to 'man
samba_selinux' for more information on setting up Samba and SELinux.

Allowing Access:

You can alter the file context by executing chcon -R -t samba_share_t
'/proc/fs/nfsd' You must also change the default file context files on the
system in order to preserve them even on a full relabel. "semanage fcontext -a
-t samba_share_t '/proc/fs/nfsd'"

Fix Command:

chcon -R -t samba_share_t '/proc/fs/nfsd'

Additional Information:

Source Context                system_u:system_r:smbd_t:s0
Target Context                system_u:object_r:nfsd_fs_t:s0
Target Objects                /proc/fs/nfsd [ dir ]
Source                        smbd
Source Path                   /usr/sbin/smbd
Port                          <Unknown>
Host                          (removed)
Source RPM Packages           samba-3.5.0-55rc3.fc14
Target RPM Packages           
Policy RPM                    selinux-policy-3.7.15-4.fc13
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Permissive
Plugin Name                   samba_share
Host Name                     (removed)
Platform                      Linux (removed)
                              2.6.34-0.28.rc3.git3.fc14.i686.PAE #1 SMP Mon Apr
                              5 17:05:06 UTC 2010 i686 i686
Alert Count                   212
First Seen                    Tue 22 Sep 2009 12:01:22 AM EDT
Last Seen                     Thu 22 Apr 2010 11:09:11 PM EDT
Local ID                      c0da8e20-c649-4c06-b88a-95e0fc21e7f5
Line Numbers                  

Raw Audit Messages            

node=(removed) type=AVC msg=audit(1271992151.541:25495): avc:  denied  { getattr } for  pid=15330 comm="smbd" path="/proc/fs/nfsd" dev=nfsd ino=1 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:nfsd_fs_t:s0 tclass=dir

node=(removed) type=SYSCALL msg=audit(1271992151.541:25495): arch=40000003 syscall=195 success=yes exit=0 a0=bf896abd a1=bf896eb8 a2=544ff4 a3=0 items=0 ppid=1652 pid=15330 auid=4294967295 uid=0 gid=0 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4294967295 comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null)



Hash String generated from  samba_share,smbd,smbd_t,nfsd_fs_t,dir,getattr
audit2allow suggests:

#============= smbd_t ==============
allow smbd_t nfsd_fs_t:dir getattr;