avc: denied { search } for smbd

Felipe Alfaro Solana lkml at mac.com
Sat Apr 23 16:00:12 UTC 2005


On 23 Apr 2005, at 14:25, Ivan Gyurdiev wrote:

>
>> So I don't understand what's going on: the policy explicitly allows
>> domain smbd_t to perform search on home_root_t:dir and /home is 
>> already
>> labeled home_root_t.
>
> Yes, but it only does this when samba_enable_home_dirs is on.
>
> Toggle the boolean.

Thanks.
I have manually added the following line to 
/etc/selinux/targeted/booleans.local

samba_enable_home_dirs=1

but now, I'm getting these avc's:

audit(1114271834.460:0): avc:  denied  { getattr } for  path=/dev/pts 
dev=devpts ino=1 scontext=user_u:system_r:smbd_t 
tcontext=user_u:object_r:devpts_t tclass=dir

More ideas?




More information about the fedora-selinux-list mailing list