samba & selinux

[Gordon Messmer]

McGuffey, David C. wrote:
> 
> I don't want to remove or back away from selinux in enforcing mode.  I
> have customers who want to build applications on top of selinux, so the
> task at hand is to get smart and make things work with selinux.

I can't find any selinux boolean or setting to allow samba access to the 
required contexts.  What I'd do is change your policy to permissive and 
use samba to access the files as you require.  Then use "audit2allow" to 
create SELinux rules that will allow normal samba operation.  Install 
those, and then go back to enforcing mode.