grsecurity forums

Hi, I've got problem with samba and acl. I wrote a statement for /usr/sbin/smbd like this:

subject /usr/sbin/smbd o {
here i've got permissions to files, but it doesn't matter now.
}

When i try to use samba(for example smblicent -L host_name), i get an error:

May 12 00:21:14 alfa kernel: grsec: From 213.155.x.x: (default:D:/) denied open of /etc/samba/private/secrets.tdb for reading writing by /usr/sbin/smbd[smbd:5071] uid/euid:0/0 gid/egid:0/0, parent /usr/sbin/smbd[smbd:18340] uid/euid:0/0 gid/egid:0/0

My main worry is Grsecurity seems to ignore my statement concern /usr/sbin/smbd - it uses default subject from default role. Why? Is anyone able to help me?
thx you so much.

Can you post your full policy file somehwere?

hello,
It turned out it was my fault. i did stupid mistake. i had "include" statements in my "policy" file. One of the included files concern chrooted bind (there is named user role ). I added this file in the middle of others "include" statements. As result of this was matching up everything below with named user role.