avc: denied { search } for smbd

[Ivan Gyurdiev]

> 
> audit(1114271834.460:0): avc:  denied  { getattr } for  path=/dev/pts 
> dev=devpts ino=1 scontext=user_u:system_r:smbd_t 
> tcontext=user_u:object_r:devpts_t tclass=dir

Yeah, I get those too, when doing df with a mounted samba share.
See bug here:

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=147659

This particular denial you can get if smbd_t tries to access the
terminal, but I get it for df (in smbd_t), which is weird.


-- 
Ivan Gyurdiev <ivg2 at cornell.edu>
Cornell University