![在启用 800-171 安全策略的情况下安装 samba-ad-dc 时找不到共享库](https://linux22.com/image/227676/%E5%9C%A8%E5%90%AF%E7%94%A8%20800-171%20%E5%AE%89%E5%85%A8%E7%AD%96%E7%95%A5%E7%9A%84%E6%83%85%E5%86%B5%E4%B8%8B%E5%AE%89%E8%A3%85%20samba-ad-dc%20%E6%97%B6%E6%89%BE%E4%B8%8D%E5%88%B0%E5%85%B1%E4%BA%AB%E5%BA%93.png)
为了确保合规性,我尝试让 Samba DC 在启用了 FIPS 800-171 安全策略的 Rocky Linux 8 上运行。从 DVD 映像安装全新的最小 VM,我下载并解压 .tar,运行 Centos8S 的 bootstrap.sh(./configure
make
make install
源(默认设置)),设置 systemd 服务,并尝试运行它;但我遇到了以下错误:
Nov 30 14:26:03 171-dc-test systemd[1]: Starting Samba Active Directory Domain Controller...
-- Subject: Unit samba-ad-dc.service has begun start-up
-- Defined-By: systemd
-- Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit samba-ad-dc.service has begun starting up.
Nov 30 14:26:03 171-dc-test samba[1449]: /usr/local/samba/sbin/samba: error while loading shared libraries: libevents-samba4.so: cannot open shared object file: No such file or directory
Nov 30 14:26:03 171-dc-test systemd[1]: samba-ad-dc.service: Control process exited, code=exited status=127
Nov 30 14:26:03 171-dc-test systemd[1]: samba-ad-dc.service: Failed with result 'exit-code'.
-- Subject: Unit failed
-- Defined-By: systemd
-- Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- The unit samba-ad-dc.service has entered the 'failed' state with result 'exit-code'.
Nov 30 14:26:03 171-dc-test systemd[1]: Failed to start Samba Active Directory Domain Controller.
-- Subject: Unit samba-ad-dc.service has failed
-- Defined-By: systemd
-- Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit samba-ad-dc.service has failed.
--
-- The result is failed.
有问题的文件正好位于它应该在的位置:
-rwxr-xr-x. 1 root root 8192 Nov 30 14:09 /usr/local/samba/lib/private/libevents-samba4.so
在另一台未启用安全策略的虚拟机上执行此精确过程效果非常好。设置selinux
为宽容、停止fapolicyd
和禁用 FIPS 模式并重新启动不会影响结果。有人知道我需要去哪里查找以找出为什么这不起作用吗?我假设有什么东西阻止了对该文件夹的访问,但我不确定它是什么。谢谢。