FC4 + samba + selinux

Louis E Garcia II louisg00 at bellsouth.net
Sun Feb 26 04:04:31 UTC 2006


I am setting up an FC4 samba server and can't get my shares accessed.
With selinux off samba works normally. 

I have created a dir:
drwxrwsrwx  root     root
system_u:object_r:samba_share_t  /data/public

The is the error I get:

type=AVC msg=audit(1140923608.645:86): avc:  denied  { search } for
pid=3338 comm="smbd" name="/" dev=hda5 ino=2
scontext=root:system_r:smbd_t tcontext=system_u:object_r:default_t
tclass=dir
type=SYSCALL msg=audit(1140923608.645:86): arch=40000003 syscall=195
success=no exit=-13 a0=88b85f8 a1=bff9aec4 a2=7fbff4 a3=bff9aec4 items=1
pid=3338 auid=500 uid=502 gid=0 euid=502 suid=0 fsuid=502 egid=100
sgid=100 fsgid=100 comm="smbd" exe="/usr/sbin/smbd"
type=CWD msg=audit(1140923608.645:86):  cwd="/"
type=PATH msg=audit(1140923608.645:86): item=0 name="/data/public"
flags=1  inode=2 dev=03:05 mode=040755 ouid=0 ogid=0 rdev=00:00

why does smbd_t want access to default_t when the dir is labeled
samba_share_t?

Does smbd_t have access to samba_share_t by default?

Any advise, --Louis




More information about the fedora-selinux-list mailing list