$ getsebool -a | grep -i rsync allow_rsync_anon_write --> off rsync_client --> off rsync_export_all_ro --> off rsync_use_cifs --> off rsync_use_nfs --> off
$ setsebool -P allow_rsync_anon_write on
RESULTADO: NO SE SOLUCIONO! (aun despues de reinicar xinetd)
$ tail -f audit/audit.log
ReplyDeletetype=AVC msg=audit(1406657662.132:205): avc: denied { search } for pid=23098 comm="rsync" name="/" dev=sdb1 ino=2 scontext=system_u:system_r:rsync_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1406657662.132:205): arch=c000003e syscall=80 success=no exit=-13 a0=17add70 a1=1 a2=3 a3=8 items=0 ppid=1556 pid=23098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="rsync" exe="/usr/bin/rsync" subj=system_u:system_r:rsync_t:s0-s0:c0.c1023 key=(null)
$ getsebool -a | grep -i rsync
allow_rsync_anon_write --> off
rsync_client --> off
rsync_export_all_ro --> off
rsync_use_cifs --> off
rsync_use_nfs --> off
$ setsebool -P allow_rsync_anon_write on
RESULTADO: NO SE SOLUCIONO! (aun despues de reinicar xinetd)
$ setsebool -P rsync_client on
DeleteSigue igual, dando el error: @ERROR: chdir failed
Volvemos atras cambio de politica
ReplyDelete$ setsebool -P rsync_client off
$ yum install policycoreutils-python
ReplyDelete$ semanage fcontext -a -t public_content_rw_t "/srv/rsync(/.*)?"
ReplyDelete