[CentOS] Odd failure of smbd to start from init.d - CentOS 5.4 - it's that fine SELinux

JohnS jses27 at gmail.com
Wed May 26 13:16:33 UTC 2010


On Tue, 2010-05-25 at 21:27 -0400, Whit Blauvelt wrote:

> But if someone can tell me why selinux thinks it's sane to block
> "/etc/init.d/smb start" while leaving "sh /etc/init.d/smb start" and even
> /some/random/dir/smb start" wide open ... I just can't believe some happy
> hacker at NSA thought that would count as a security scheme. Really, I'd
> like to know how this is supposed to be useful.
----
It had good reason to because you did inhereitly edit it as shown by the
previous rpm -V.  I say you will have more SEL problems if you do not do
a full relabel on boot.  You really need selinux for samba to prevent
buffer overflows. That is how it is usefull.  

John




More information about the CentOS mailing list