Page 1 of 1

Problem with Samba - ignoring ACL

PostPosted: Wed May 11, 2005 5:58 pm
by Jacek
Hi, I've got problem with samba and acl. I wrote a statement for /usr/sbin/smbd like this:

subject /usr/sbin/smbd o {
here i've got permissions to files, but it doesn't matter now.

When i try to use samba(for example smblicent -L host_name), i get an error:

May 12 00:21:14 alfa kernel: grsec: From 213.155.x.x: (default:D:/) denied open of /etc/samba/private/secrets.tdb for reading writing by /usr/sbin/smbd[smbd:5071] uid/euid:0/0 gid/egid:0/0, parent /usr/sbin/smbd[smbd:18340] uid/euid:0/0 gid/egid:0/0

My main worry is Grsecurity seems to ignore my statement concern /usr/sbin/smbd - it uses default subject from default role. Why? Is anyone able to help me? :-)
thx you so much.

PostPosted: Wed May 11, 2005 8:00 pm
by rocky
Can you post your full policy file somehwere?

PostPosted: Fri May 13, 2005 3:43 pm
by Jacek
It turned out it was my fault. i did stupid mistake. i had "include" statements in my "policy" file. One of the included files concern chrooted bind (there is named user role ). I added this file in the middle of others "include" statements. As result of this was matching up everything below with named user role.