search for: samba_export_all_rw

Hello, I have Samba 4 installed with some correctly configured shares so I can access them from my Windows box. It is a proven setup from an older Fedora+Samba setup, though on that other machine I have SELinux disabled. So I set samba_export_all_rw=1 to be able to access the shares whose files and directories are labelled public_content_rw_t by issuing: semanage fcontext -a -t public_content_rw_t '/myrootfolder(/.*)?' restorecon -R -v /myrootfolder After that I can indeed create, write and update files anywhere in the share and it...

Does anybody know what 'setsebool -P samba_export_all_rw on' is actually supposed to do? I'm trying to share /tmp via samba and am seeing the same results with samba_export_all_rw set to on or off. Maybe I'm misunderstanding what this is intended to do but from windows I cannot see files in /tmp with 'tmp_t' security context (as...

...ped:0 overruns:0 frame:0 TX packets:1135336 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:4284194888 (3.9 GiB) TX bytes:192947542 (184.0 MiB) [root at ESX2VMTKRHEL2 ~]# [root at ESX2VMTKRHEL2 ~]# vi /etc/samba/smb.conf # setsebool -P samba_export_all_rw on # #======================= Global Settings ===================================== [global] netbios name = ESX2VMTKRHEL2 server string = Samba Domain Member Server workgroup = HARI security = ADS realm = HARI.COM dedicated keytab file = /etc/krb5....

...abels only on files and directories you have created. Use the # chcon command to temporarily change a label: # chcon -t samba_share_t /path/to/directory # # Changes made via chcon are lost when the file system is relabeled or commands # such as restorecon are run. # # Use the samba_export_all_ro or samba_export_all_rw Boolean to share system # directories. To share such directories and only allow read-only permissions: # setsebool -P samba_export_all_ro on # To share such directories and allow read and write permissions: # setsebool -P samba_export_all_rw on # # To run scripts (preexec/root prexec/print command/...

...low_mplayer_execstack', 'httpd_can_sendmail', 'httpd_enable_homedirs', 'wine', 'xen_image', 'secure_mode_policyload', 'allow_execmod', 'disable_ipv6', 'httpd_can_network_connect_db', 'sys_module', 'bind_ports', 'samba_export_all_rw', 'use_samba_home_dirs', 'rsync_data', 'allow_kerberos', 'httpd_ssi_exec', 'mmap_zero', 'global_ssp', 'allow_rsync_anon_write', 'cvs_data', 'allow_ftpd_anon_write', 'device', 'catchall_boolean', 'automou...

...abels only on files and directories you have created. Use the # chcon command to temporarily change a label: # chcon -t samba_share_t /path/to/directory # # Changes made via chcon are lost when the file system is relabeled or commands # such as restorecon are run. # # Use the samba_export_all_ro or samba_export_all_rw Boolean to share system # directories. To share such directories and only allow read-only permissions: # setsebool -P samba_export_all_ro on # To share such directories and allow read and write permissions: # setsebool -P samba_export_all_rw on # # To run scripts (preexec/root prexec/print command/...

...you have created. Use the > # chcon command to temporarily change a label: > # chcon -t samba_share_t /path/to/directory > # > # Changes made via chcon are lost when the file system is relabeled or commands > # such as restorecon are run. > # > # Use the samba_export_all_ro or samba_export_all_rw Boolean to share system > # directories. To share such directories and only allow read-only permissions: > # setsebool -P samba_export_all_ro on > # To share such directories and allow read and write permissions: > # setsebool -P samba_export_all_rw on > # > # To run scripts (pree...

...ories you have created. > Use the # chcon command to temporarily change a label: > # chcon -t samba_share_t /path/to/directory # # Changes made via chcon > are lost when the file system is relabeled or commands # such as > restorecon are run. > # > # Use the samba_export_all_ro or samba_export_all_rw Boolean to share > system # directories. To share such directories and only allow read-only permissions: > # setsebool -P samba_export_all_ro on > # To share such directories and allow read and write permissions: > # setsebool -P samba_export_all_rw on > # > # To run scripts (pree...

Hi Volker, It would be useful if your 3.3.9 build (currently in recent) included the /var/spool/samba directory - it just took me a while to figure out why Samba printing wasn't working on a new EL5 server ;-) Moray. "To err is human.? To purr, feline"

..._t /exports ; # /usr/sbin/semanage fcontext -a -t samba_share_t "/exports(/.*)?" ; # /sbin/restorecon -R -v /exports ; # ausearch -c 'nmbd' --raw | audit2allow -M my-nmbd ; # semodule -X 300 -i my-nmbd.pp ; # setsebool -P samba_enable_home_dirs 1 ; # setsebool -P samba_export_all_rw 1 ; # ausearch -c 'winbindd' --raw | audit2allow -M my-winbindd ; # semodule -X 300 -i my-winbindd.pp ; # setsebool -P samba_domain_controller on ; # ausearch -c 'useradd' --raw | audit2allow -M my-useradd ; # semodule -X 300 -i my-useradd.pp ; ; to view your SELin...

..._t /exports ; # /usr/sbin/semanage fcontext -a -t samba_share_t "/exports(/.*)?" ; # /sbin/restorecon -R -v /exports ; # ausearch -c 'nmbd' --raw | audit2allow -M my-nmbd ; # semodule -X 300 -i my-nmbd.pp ; # setsebool -P samba_enable_home_dirs 1 ; # setsebool -P samba_export_all_rw 1 ; # ausearch -c 'winbindd' --raw | audit2allow -M my-winbindd ; # semodule -X 300 -i my-winbindd.pp ; # setsebool -P samba_domain_controller on ; # ausearch -c 'useradd' --raw | audit2allow -M my-useradd ; # semodule -X 300 -i my-useradd.pp ; ; to view your SELin...

...you have created. Use the > # chcon command to temporarily change a label: > # chcon -t samba_share_t /path/to/directory > # > # Changes made via chcon are lost when the file system is relabeled or commands > # such as restorecon are run. > # > # Use the samba_export_all_ro or samba_export_all_rw Boolean to share system > # directories. To share such directories and only allow read-only permissions: > # setsebool -P samba_export_all_ro on > # To share such directories and allow read and write permissions: > # setsebool -P samba_export_all_rw on > # > # To run scripts (pree...

...you have created. Use the > # chcon command to temporarily change a label: > # chcon -t samba_share_t /path/to/directory > # > # Changes made via chcon are lost when the file system is relabeled or commands > # such as restorecon are run. > # > # Use the samba_export_all_ro or samba_export_all_rw Boolean to share system > # directories. To share such directories and only allow read-only permissions: > # setsebool -P samba_export_all_ro on > # To share such directories and allow read and write permissions: > # setsebool -P samba_export_all_rw on > # > # To run scripts (pree...

...bels only on files and directories you have created. Use the # chcon command to temporarily change a label: # chcon -t samba_share_t /path/to/directory # # Changes made via chcon are lost when the file system is relabeled or commands # such as restorecon are run. # # Use the samba_export_all_ro or samba_export_all_rw Boolean to share system # directories. To share such directories and only allow read-only permissions: # setsebool -P samba_export_all_ro on # To share such directories and allow read and write permissions: # setsebool -P samba_export_all_rw on # # To run scripts (preexec/root prexec/print command...

...t samba_share_t public/ [root at sambafileserver /]# ll -Zd public/ drwxrwxr-x+ root root unconfined_u:object_r:samba_share_t:s0 public/ [root at sambafileserver /]# setfacl -m u:nobody:rwx public/ After those all not fixed the issue so i have changed these , even so not fixed #setsebool -P samba_export_all_rw on #setsebool -P samba_enable_home_dirs on Let me Give my smb.conf entry [global] # ----------------------- Network Related Options -------------------------## workgroup = NT-Domain-Name or Workgroup-Name, eg: MIDEARTH## server string is the equivalent of the NT Description field## netbios name...

...gt;> # chcon command to temporarily change a label: >> # chcon -t samba_share_t /path/to/directory >> # >> # Changes made via chcon are lost when the file system is relabeled or commands >> # such as restorecon are run. >> # >> # Use the samba_export_all_ro or samba_export_all_rw Boolean to share system >> # directories. To share such directories and only allow read-only permissions: >> # setsebool -P samba_export_all_ro on >> # To share such directories and allow read and write permissions: >> # setsebool -P samba_export_all_rw on >> # >&gt...

...nf or at the rights of the filesystem - only automatic security updates was active. Before this time we have no problems. this is ok: \\fb09-pg-s400\clc01\18_Drought_Stress_Selection_Tools_Marie_Hohmann but the access at the subfolder failed - Windows: no access here smb.conf # setsebool -P samba_export_all_rw on # setsebool -P samba_enable_home_dirs on # setsebool -P samba_domain_controller on #======================= Global Settings ===================================== [global] # ----------------------- Network Related Options ------------------------- workgroup = fb09-pg server string = CLCGenom...

Hello, since last friday (2017-09-22) we have problems with samba shares outside user home - at 2017-09-21 works all things fine - and no changes at smb.conf or filesystem. Version: samba-3.6.23-45.el6_9.x86_64 Linux: Scientific Linux release 6.9 / 2.6.32-696.10.2.el6.x86_64 Problem: the users can open the samba share and see all files and directories in topmost level, but he can change into a

On 10/03/2017 05:33 AM, Rowland Penny via samba wrote: > Sorry if some of these sound like teaching your grandmother to suck > eggs, but it is better to say them than not;-) > > Rowland Hi Rowland, I appreciate the the help! You did exactly what I ask for, which was to let it rip. I will have to read over slowly several times. Be nice to disable winbind too. My ego

...eated. > Use the > # chcon command to temporarily change a label: > # chcon -t samba_share_t /path/to/directory > # > # Changes made via chcon are lost when the file system is relabeled or > commands > # such as restorecon are run. > # > # Use the samba_export_all_ro or samba_export_all_rw Boolean to share > system > # directories. To share such directories and only allow read-only > permissions: > # setsebool -P samba_export_all_ro on > # To share such directories and allow read and write permissions: > # setsebool -P samba_export_all_rw on > # > # To run s...