Hi folks,
I've been googling for an hour on this which seems to be awfully
basic. But I cannot find anything definitive.
[root at centos-gig ~]# systemctl enable smb.service
Failed to execute operation: Access denied
[root at centos-gig ~]# setenforce 0
[root at centos-gig ~]# systemctl enable smb.service
Failed to execute operation: No such file or directory
Have tried things like :
chcon -t samba_share_t /home/amckay
Also took the output from:
getsebool -a | grep samba
and set all them to "on"
Stripped my config down to the most basic.
What am I missing?
# Global parameters
[global]
netbios name = centos
security = USER
idmap config * : backend = tdb
[homes]
comment = Home Directories
browseable = No
inherit acls = Yes
read only = No
valid users = %S %D%w%S
--
"You should sit in nature for 20 minutes a day.
Unless you are busy, then you should sit for an hour"
- Zen Proverb
Also tried this :
[root at centos-gig ~]# cat allow
type=USER_AVC msg=audit(1507584974.134:166105): pid=1 uid=0
auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0
msg='avc: received setenforce notice (enforcing=1)
exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=?
terminal=?'
type=USER_AVC msg=audit(1507584974.137:166106): pid=1 uid=0
auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0
msg='avc: denied { enable } for auid=1000 uid=0 gid=0
cmdline="systemctl enable smb.service"
scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
tcontext=system_u:system_r:init_t:s0 tclass=service
exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=?
terminal=?'
[root at centos-gig ~]# audit2allow -i ./allow -M samba
******************** IMPORTANT ***********************
To make this policy package active, execute:
semodule -i samba.pp
[root at centos-gig ~]# semodule -i ./samba.pp
libsemanage.semanage_direct_install_info: Overriding samba module at
lower priority 100 with module at priority 400.
Failed to resolve typeattributeset statement at
/etc/selinux/targeted/tmp/modules/100/ksmtuned/cil:78
semodule: Failed!
[root at centos-gig ~]# audit2allow -i ./allow -M samba-new
******************** IMPORTANT ***********************
To make this policy package active, execute:
semodule -i samba-new.pp
[root at centos-gig ~]# semodule -i ./samba-new.pp
[root at centos-gig ~]# systemctl enable smb.service
Failed to execute operation: No such file or directory
[root at centos-gig ~]# setenforce 1
[root at centos-gig ~]# systemctl enable smb.service
Failed to execute operation: No such file or directory
[root at centos-gig ~]# setenforce 1
[root at centos-gig ~]# systemctl enable smb.service
Failed to execute operation: No such file or directory
[root at centos-gig ~]#
Ug - can't believe it. [root at centos-gig ~]# rpm -qa | grep samba samba-libs-4.4.4-14.el7_3.x86_64 samba-client-4.4.4-14.el7_3.x86_64 samba-client-libs-4.4.4-14.el7_3.x86_64 samba-common-tools-4.4.4-14.el7_3.x86_64 samba-common-libs-4.4.4-14.el7_3.x86_64 samba-common-4.4.4-14.el7_3.noarch [root at centos-gig ~]# yum -y install samba (and it goes on to install the one missing package) Not sure how I ended up with everything but that one ...
Maybe Matching Threads
- Samba won't start on Centos 7.3.1611
- NOT Solved - Re: SELinux policy to allow Dovecot to connect to Mysql
- Centos 7: avc: denied { reload } for auid=0 uid=0 gid=0 cmdline="/usr/bin/systemctl reload named-chroot.service" ....
- Customizing SELinux Policy
- selinux policy (& engine) broken in C7