[Bugs] [Bug 1402661] Samba crash when mounting a distributed dispersed volume over CIFS

[bugzilla at redhat.com]

https://bugzilla.redhat.com/show_bug.cgi?id=1402661



--- Comment #35 from Anoop C S <anoopcs at redhat.com> ---
Hi Xavi,

I ran a search through the current policies as follows in order to see the
SELinux allow rules for glusterd_t and highlighted those in which execute
permission is granted for class 'file':
# sesearch --allow | grep -E 'allow glusterd_t [a-z|_]* : file { ' | grep
execute

>From the output I think it is safe to create the file under
/usr/libexec/glusterfs/ based on the following allow rule:
allow glusterd_t glusterd_exec_t : file { ioctl read getattr lock execute
execute_no_trans entrypoint open } ;

By default files under /usr/libexec/glusterfs will have system_u:object_r:bin_t
as the SELinux context. I confirmed the same by modifying your sample C
program. I don't know whether we have /usr/libexec already pre-defined in
glusterfs source. But I guess its not a big deal.

Is this solution of creating the file under /usr/libexec/glusterfs/ for mmap()
acceptable for you?

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=sXJ2Ss1m4J&a=cc_unsubscribe