similar to: Improved Shared Folders UX and security

How can I enforce SELinux separation between the shared folders belonging to different VMs running with sVirt's SELinux dynamic labels? I want to create a permanent exception for VM 'A' to only be able to read and write to shared folder 'A' and the same for VM 'B' and shared folder 'B' svirt_image_t permits access to a shared folder but for all VMs.

https://bugzilla.mindrot.org/show_bug.cgi?id=3641 Bug ID: 3641 Summary: Improved SELinux support for openssh Product: Portable OpenSSH Version: 9.5p1 Hardware: Other OS: Linux Status: NEW Severity: enhancement Priority: P5 Component: Miscellaneous Assignee: unassigned-bugs at

Hi, on HP-UX we want some users to have the same homedir. Homedir is managed by puppet as file resource. We now want to move the users to another primary group. useradd.sam complains: err: /User[XXX]/gid: change from 3 to 0 failed: Could not set gid on user[XXX]: Execution of ''/usr/sam/lbin/usermod.sam -F -g 0 XXX'' returned 45: Cannot modify user ''XXX'':

于 2014年08月21日 20:58, Eric Blake 写道: > On 08/21/2014 01:38 AM, Qiang Guan wrote: >> Hi guys, >> >> It seems libvirt disable SELinux driver by default. > You need to provide more details to substantiate your claim. What > platform are you running on, and what version of libvirt? Did you build > it yourself or are you using the pre-built distro version? > >

El 13 de abril de 2017 9:56:00 GMT-04:00, Rowland Penny via samba <samba at lists.samba.org> escribió: >On Thu, 13 Apr 2017 09:28:09 -0400 >Rommel Rodriguez Toirac via samba <samba at lists.samba.org> wrote: > >> >> I follow step by step Setting up a Share Using Windows ACLs from >> wiki, but still I have an Access denied when try to change the >>

As an update it states the following when booting either rhel4, fc3 or fc4 under xen? Not sure if the "unable to open an initial console" is the real issue, this doesn''t happen under fc1, or rhel 3. Can anyone help please Freeing unused kernel memory: 152k freed Warning: unable to open an initial console. ***************************************************************

Trying 2.1.1p2 on HP-UX 11 (trusted system) I get: Jul 3 14:24:53 robinson sshd[1236]: debug: Encryption type: 3des Jul 3 14:24:53 robinson sshd[1236]: debug: Received session key; encryption turned on. Jul 3 14:24:53 robinson sshd[1236]: debug: Installing crc compensation attack detector. Jul 3 14:24:53 robinson sshd[1236]: debug: Starting up PAM with username "stevesk" Jul 3

Hi List, I'm using Samba 3.0.1 as PDC and Openldap 2.1.23 as backend on a Suse 8.2 System, both are build from scratch. Nearly everything is fine, expect I'm not able to change the security setting of subfolders on my shares via my Win2k box. More details: Changing the security setting of my top level shares (created in smb.conf) works fine with the SRVMGR, but everytime I try to

On 08/21/2014 01:38 AM, Qiang Guan wrote: > Hi guys, > > It seems libvirt disable SELinux driver by default. You need to provide more details to substantiate your claim. What platform are you running on, and what version of libvirt? Did you build it yourself or are you using the pre-built distro version? Fedora-based distributions (and that includes RHEL and CentOS) ship the distro

Can you access from windows? I also notice that samba 4.2.10 is no longer a supported version. On 12/01/16 15:39, truename via samba wrote: > Following is output of smbclient -L \\127.0.0.1 -U test1: > > > > Sharename Type Comment > --------- ---- ------- > data Disk data > IPC$ IPC IPC

Hi folks, normally I have not so much to do with SElinux but I expected to get in touch sooner or later :-) I migrated a backup-system from El5 to EL6 and the rsync backup process is complaining about selinux attr's now. client <-> server (fetches via rsync -aHAX) client# sestatus SELinux status: disabled server# sestatus SELinux status: enabled

Hello, I have Samba 4 installed with some correctly configured shares so I can access them from my Windows box. It is a proven setup from an older Fedora+Samba setup, though on that other machine I have SELinux disabled. So I set samba_export_all_rw=1 to be able to access the shares whose files and directories are labelled public_content_rw_t by issuing: semanage fcontext -a -t

I found that if I create a folder under / as my shared folder(for example: /data), the samba work. If the shared folder is /home/myname/data, it doesn't work. At 2016-12-03 12:31:31, "truename via samba" <samba at lists.samba.org> wrote: >The result of accessing from windows is same as accessing from Linux, after I input correct username and password and click connect

Hi all, On my newly up-and-running nameserver (CentOS 5), I noticed the following alerts in /var/log/messages after restarting BIND. (lines inserted to aid in reading). As I'm new to SELinux, I'm hoping for some pointers on 1) if this is an issue which simply *must* be addressed, or if it's something I should live with, and 2) how to eliminate the warming messages without sacrificing

Hi All, I have this following issue in SELinux. I did what instruction said but the security context has still never changed. Do I need to create local SELinux module? I hope anyone could help me out of this. Thank you. ------------------------------------------------------- # sealert -b ........................................ Summary: SELinux is preventing postmaster (postgresql_t)

HP has taken OpenSSH version 3.1p1 and made a binary swinstall product for HP-UX customers to use. The source is bundled with the product and is slightly different than OpenSSH 3.1p1, but the changes made were just to make the OpenSSH features work on HP-UX 11.00 and 11i. HP-UX Secure Shell is a fully supported no charge product for HP-UX users with a current HP-UX support contract, and is

Hi, I have managed to test this same transfer reliably with the Linux boxes and open-ssh, but I am in trouble with the OSF1 4.0 (Digital Unix) being the server sending files from a single directory to the HP/UX 11 - being the client The 'sshd2' (and ssh2) in both ends is installed as root (and starts probably from 'rc') The 'rsync' (2.4.6) in both end is just

On 4/16/19 12:47 PM, Marco Gemignani via samba wrote: > hi, i want set selinux to usw with ntpd > > > but when i run (as described in wiki) > > semanage -a -t ntpd_t "/usr/local/samba/var/lib/ntp_signd" > > > i have that error > " > usage: semanage [-h] > > >

Security=server Username map=/etc/opt/samba/username.map All NT ids are mapped to the same unix id via username.map. Some NT id's don't see all the SHARES when they access SAMBA...Not sure why this would be if all NT ids are being translated to the same unix id.

i join windows workstations from the computer with the properties and switching it to a domain giving after the credentials of the Administrator and the password of the Administrator to join the active directory domain On Sun, May 8, 2016 at 10:03 PM, nikos sarantopoulos < nsarantopoulos68 at gmail.com> wrote: > it is a standalone server but what permissions i should set to this image