[FC5] Samba and SELinux
bobk at ocf.berkeley.edu
Thu Apr 6 18:05:54 UTC 2006
On Thu, 2006-04-06 at 07:42 +0100, Paul Howarth wrote:
> On Wed, 2006-04-05 at 12:59 -0700, Bob Kashani wrote:
> > On Wed, 2006-04-05 at 10:59 -0700, Dan Thurman wrote:
> > > Folks,
> > >
> > > What is the procedure for creating Samba shares and
> > > getting around the SELinux issues?
> > >
> > > Samba by default no longer works with shares such
> > > as [homes] and any other added shares without administrator
> > > intervention to add SELinux labels on share directories.
> > >
> > > Please direct me to the FAQ for Samba & SELinux or
> > > please tell me what I have to do to get samba shares
> > > working.
> > >
> > > In my case - I am getting permission denied in the audit
> > > logs and in the message logs for nmbd, I am getting
> > > directories do not exists errors (when they actually
> > > do!).
> > /usr/sbin/setsebool -P samba_enable_home_dirs=1
> > /usr/sbin/setsebool -P smbd_disable_trans=1
> > That's what I had to do to get samba working with home shares on FC5.
> The second of these is turning off SELinux protection for the samba
> server. It really shouldn't be necessary to do that if you're just
> trying to share home directories (/home/*) using samba.
For some odd reason I needed to add the second one to get things working
the first time around. I just tried it again without the second one and
everything works fine. I guess I did something wrong the first time.
Thanks, for clarifying. :)
More information about the fedora-selinux-list