CIFS Connectathon: SELinux prevents samba-dcerpcd and rpcd_classic
Snippet of test failure
# https://beaker-archive.host.prod.eng.bos.redhat.com/beaker-logs/2022/06/67115/6711556/12127244/146017832/680739156/avc.log
SELinux status: enabled
SELinuxfs mount: /sys/fs/selinux
SELinux root directory: /etc/selinux
Loaded policy name: targeted
Current mode: permissive
Mode from config file: permissive
Policy MLS status: enabled
Policy deny_unknown status: allowed
Memory protection checking: actual (secure)
Max kernel policy version: 33
selinux-policy-37.4-1.fc37.noarch
----
time->Sat Jun 11 19:51:47 2022
type=AVC msg=audit(1654991507.362:1188): avc: denied { create } for pid=520079 comm="samba-dcerpcd" name="samba-dcerpcd" scontext=system_u:system_r:winbind_rpcd_t:s0 tcontext=system_u:object_r:samba_log_t:s0 tclass=dir permissive=1
----
time->Sat Jun 11 19:51:47 2022
type=AVC msg=audit(1654991507.796:1189): avc: denied { connectto } for pid=520089 comm="rpcd_classic" path="/run/samba/ncalrpc/np/winreg" scontext=system_u:system_r:winbind_rpcd_t:s0 tcontext=system_u:system_r:winbind_rpcd_t:s0 tclass=unix_stream_socket permissive=1
----
time->Sat Jun 11 19:51:47 2022
type=AVC msg=audit(1654991507.798:1190): avc: denied { getattr } for pid=520089 comm="rpcd_classic" path="/etc/krb5.conf" dev="dm-0" ino=17081835 scontext=system_u:system_r:winbind_rpcd_t:s0 tcontext=system_u:object_r:krb5_conf_t:s0 tclass=file permissive=1
.
.
.
Test logs on DataWarehouse
DataWarehouse issue
-
DW issue : https://datawarehouse.cki-project.org/issue/1323
-
Regex
: https://datawarehouse.cki-project.org/issue/-/regex/1278- Text Match :
avc:\s*denied\s*{ \S+ } for pid=\d+ comm="rpcd_classic" path="\S+" scontext=system_u:system_r:winbind_rpcd_t
- (Log) File Name Match :
avc.log
- Test Name Match :
CIFS Connectathon
- KPET Tree Name Match :
(upstream|rawhide)
- Text Match :
-
Additional details
N/A
In case opening the links above result in a 404 page on DataWarehouse, please make sure you are correctly logged into DataWarehouse via Red Hat SSO.