Advertisement
Guest User

Untitled

a guest
Aug 29th, 2016
59
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.84 KB | None | 0 0
  1. Aug 29 13:28:38 servername kernel: [11625.509586] type=1400 audit(1472491718.859:35): avc: denied { read } for pid=7492 comm="smbd" name="spamfilter-all.log" dev="dm-3" ino=26 scontext=system_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_log_t:s0 tclass=lnk_file
  2. Aug 29 13:28:38 servername kernel: [11625.626225] type=1400 audit(1472491718.975:36): avc: denied { getattr } for pid=7492 comm="smbd" path="/var/log/remote/192.168.11.1" dev="dm-3" ino=1966096 scontext=system_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_log_t:s0 tclass=lnk_file
  3.  
  4. #============= smbd_t ==============
  5.  
  6. #!!!! This avc can be allowed using one of the these booleans:
  7. # samba_export_all_ro, samba_export_all_rw
  8. allow smbd_t var_log_t:lnk_file { read getattr };
  9.  
  10. audit2allow < ~/logsnippet -M allow_samba_var_log
  11. semodule -i allow_samba_var_log.pp
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement