[Bugs] [Bug 1402661] Samba crash when mounting a distributed dispersed volume over CIFS

[bugzilla at redhat.com]

https://bugzilla.redhat.com/show_bug.cgi?id=1402661



--- Comment #19 from Nigel Babu <nigelb at redhat.com> ---
The mmap code was being blocked by Selinux. I gathered the logs for Anoop today
so he could figure out what's wrong.

We found 2 SYSCALL entries blocked
type=SYSCALL msg=audit(1484635264.766:2718): arch=c000003e syscall=49
success=no exit=-13 a0=15 a1=7ff6f81ff400 a2=10 a3=7e items=0 ppid=1 pid=25743
auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0
tty=(none) ses=4294967295 comm="glusterd" exe="/usr/sbin/glusterfsd"
subj=system_u:system_r:glusterd_t:s0 key=(null)

type=SYSCALL msg=audit(1484635712.229:3062): arch=c000003e syscall=9 success=no
exit=-13 a0=0 a1=10000 a2=7 a3=22 items=0 ppid=27586 pid=27592 auid=4294967295
uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none)
ses=4294967295 comm="glusterfs" exe="/usr/sbin/glusterfsd"
subj=system_u:system_r:glusterd_t:s0 key=(null)

ausyscall says 49 is for bind and 9 for mmap. Anoop suspected that the second
syscall might be the problem at hand. As per his suggestion, I ran the tests
(just CIFS) with selinux in permissive mode and all tests passed. I'm running
the full test suite with selinux in permissive mode to confirm all is well.

Now we'll have to figure out how to make sure we can apply a specific selinux
policy for this particular access.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=z7onGktNSC&a=cc_unsubscribe