Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Aug 29 13:28:38 servername kernel: [11625.509586] type=1400 audit(1472491718.859:35): avc: denied { read } for pid=7492 comm="smbd" name="spamfilter-all.log" dev="dm-3" ino=26 scontext=system_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_log_t:s0 tclass=lnk_file
- Aug 29 13:28:38 servername kernel: [11625.626225] type=1400 audit(1472491718.975:36): avc: denied { getattr } for pid=7492 comm="smbd" path="/var/log/remote/192.168.11.1" dev="dm-3" ino=1966096 scontext=system_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_log_t:s0 tclass=lnk_file
- #============= smbd_t ==============
- #!!!! This avc can be allowed using one of the these booleans:
- # samba_export_all_ro, samba_export_all_rw
- allow smbd_t var_log_t:lnk_file { read getattr };
- audit2allow < ~/logsnippet -M allow_samba_var_log
- semodule -i allow_samba_var_log.pp
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement