From d114071e7a0b502c165e43c960abacda84e494ba Mon Sep 17 00:00:00 2001 From: Chris PeBenito Date: Fri, 23 Feb 2007 19:30:17 +0000 Subject: [PATCH] While using samba and SELinux with Debian GNU/Linux (etch) the following files need to be labeled correctly: /var/run/samba/gencache.tdb /var/run/samba/share_info.tdb Should also concern other distributions than Debian. -Stefan --- Changelog | 2 ++ policy/modules/services/samba.fc | 2 ++ policy/modules/services/samba.te | 2 +- 3 files changed, 5 insertions(+), 1 deletion(-) diff --git a/Changelog b/Changelog index fb766f2d..64d152f2 100644 --- a/Changelog +++ b/Changelog @@ -1,3 +1,5 @@ +- Patch for additional labeling of samba files from Stefan Schulze + Frielinghaus. - Patch to remove incorrect cron labeling in apache.fc from Ryan Bradetich. - Fix ptys and ttys to be device nodes. - Fix explicit use of httpd_t in openca_domtrans(). diff --git a/policy/modules/services/samba.fc b/policy/modules/services/samba.fc index d0e6b6d6..60fbca01 100644 --- a/policy/modules/services/samba.fc +++ b/policy/modules/services/samba.fc @@ -32,11 +32,13 @@ /var/run/samba/brlock\.tdb -- gen_context(system_u:object_r:smbd_var_run_t,s0) /var/run/samba/connections\.tdb -- gen_context(system_u:object_r:smbd_var_run_t,s0) +/var/run/samba/gencache\.tdb -- gen_context(system_u:object_r:smbd_var_run_t,s0) /var/run/samba/locking\.tdb -- gen_context(system_u:object_r:smbd_var_run_t,s0) /var/run/samba/messages\.tdb -- gen_context(system_u:object_r:nmbd_var_run_t,s0) /var/run/samba/namelist\.debug -- gen_context(system_u:object_r:nmbd_var_run_t,s0) /var/run/samba/nmbd\.pid -- gen_context(system_u:object_r:nmbd_var_run_t,s0) /var/run/samba/sessionid\.tdb -- gen_context(system_u:object_r:smbd_var_run_t,s0) +/var/run/samba/share_info\.tdb -- gen_context(system_u:object_r:smbd_var_run_t,s0) /var/run/samba/smbd\.pid -- gen_context(system_u:object_r:smbd_var_run_t,s0) /var/run/samba/unexpected\.tdb -- gen_context(system_u:object_r:nmbd_var_run_t,s0) diff --git a/policy/modules/services/samba.te b/policy/modules/services/samba.te index 0c39aade..b3e80335 100644 --- a/policy/modules/services/samba.te +++ b/policy/modules/services/samba.te @@ -1,5 +1,5 @@ -policy_module(samba,1.4.0) +policy_module(samba,1.4.1) ################################# #