search for: samba_selinux

Ok, so there is not a problem with SElinux and Samba. But it is a pain to set up so it will work right. I finally figured out how to set up SE and Samba so you can be able to write and delete files. I found in one of that man pages "man samba_selinux", you can just disable SE for samba. I am sure there are other ways also but this is what I have found so far. I tried to just open SE to samba but that has not worked as of yet. What does work is typing - " setsebool -P smbd_disable_trans 1" - this disables SE for just sam...

...file context of public_content_t and public_content_rw_t. These context allow any of the above domains to read the content. If you want a particular domain to write to the public_content_rw_t domain, you must set the appropriate boolean. </quote> But read the whole tftpd_selinux and samba_selinux man pages (and they share almost the same content for "Sharing files" stanzas :-) -- Fabian Arrotin The CentOS Project | http://www.centos.org gpg key: 56BEC54E | twitter: @arrfab -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: ap...

...nux veteran, but am trying to work through some issues. Specifically, setting up a simple Samba configuration on a CentOS 5 machine. Determined I needed to do setsebool -P samba_enable_home_dirs 1 In order to get access to home directory shares working correctly. Fine; this is documented in samba_selinux(8). However, I still see the following in my /var/log/audit/audit.log file: type=AVC msg=audit(1200895451.310:1231): avc: denied { rename } for pid=24854 comm="smbd" name="smbd.log" dev=dm-0 ino=14254108 scontext=user_u:system_r:smbd_t:s0 tcontext=user_u:object_r:samba_lo...

Hi all, I use samba-3.0.20b on a solaris 10 box with a ldap backend. All works fine except one thing: I have an account "bob". Its home directory is "/tmp/teachers/bob" Its group is "teachers". However when I define the teachers repository permissions like this: [zoe.root:367] ls -al /tmp drwxrwx--- 2 root teachers 177 Nov 15 13:22 teachers (access in

..._t and > public_content_rw_t. These context allow any of the above domains to > read the content. > If you want a particular domain to write to the public_content_rw_t > domain, you must set the appropriate boolean. > </quote> > > But read the whole tftpd_selinux and samba_selinux man pages (and they > share almost the same content for "Sharing files" stanzas :-) > > -- > Fabian Arrotin > The CentOS Project | http://www.centos.org > gpg key: 56BEC54E | twitter: @arrfab > > > _______________________________________________ > CentOS mail...

> If I understand well, I could add a type to another type?!?!?! No. The default targeted policy is mostly about Type Enforcement. Quote from the manual: "All files and processes are labeled with a type: types define a SELinux domain for processes and a SELinux type for files. SELinux policy rules define how types access each other, whether it be a domain accessing a type, or a