Summary:
SELinux is preventing smbd (smbd_t) "connectto" to /var/run/cups/cups.sock
(rpm_script_t).
Detailed Description:
[SELinux is in permissive mode, the operation would have been denied but was
permitted due to permissive mode.]
SELinux denied access requested by smbd. It is not expected that this access is
required by smbd and this access may signal an intrusion attempt. It is also
possible that the specific version or configuration of the application is
causing it to require additional access.
Allowing Access:
You can generate a local policy module to allow this access - see FAQ
(http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Or you can disable
SELinux protection altogether. Disabling SELinux protection is not recommended.
Please file a bug report (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi)
against this package.
Additional Information:
Source Context unconfined_u:system_r:smbd_t:s0
Target Context unconfined_u:system_r:rpm_script_t:s0-s0:c0.c1023
Target Objects /var/run/cups/cups.sock [ unix_stream_socket ]
Source smbd
Source Path /usr/sbin/smbd
Port <Unknown>
Host desitter
Source RPM Packages samba-3.2.4-0.21.fc9
Target RPM Packages
Policy RPM selinux-policy-3.3.1-99.fc9
Selinux Enabled True
Policy Type targeted
MLS Enabled True
Enforcing Mode Permissive
Plugin Name catchall
Host Name desitter
Platform Linux desitter 2.6.26.5-45.fc9.x86_64 #1 SMP Sat
Sep 20 03:23:12 EDT 2008 x86_64 x86_64
Alert Count 13
First Seen Thu 16 Oct 2008 03:48:18 PM EDT
Last Seen Thu 16 Oct 2008 10:12:23 PM EDT
Local ID 9d8bf722-54c3-404d-88d8-21a895bfe948
Line Numbers
Raw Audit Messages
host=desitter type=AVC msg=audit(1224209543.254:14177): avc: denied { connectto } for pid=1486 comm="smbd" path="/var/run/cups/cups.sock" scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:system_r:rpm_script_t:s0-s0:c0.c1023 tclass=unix_stream_socket
host=desitter type=SYSCALL msg=audit(1224209543.254:14177): arch=c000003e syscall=42 success=yes exit=0 a0=6 a1=7fd22a7295c8 a2=1a a3=7fff323c6894 items=0 ppid=1 pid=1486 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)