[FC5] Samba and SELinux

Paul Howarth paul at city-fan.org
Thu Apr 6 06:42:51 UTC 2006


On Wed, 2006-04-05 at 12:59 -0700, Bob Kashani wrote:
> On Wed, 2006-04-05 at 10:59 -0700, Dan Thurman wrote:
> > Folks,
> > 
> > What is the procedure for creating Samba shares and
> > getting around the SELinux issues?
> > 
> > Samba by default no longer works with shares such
> > as [homes] and any other added shares without administrator
> > intervention to add SELinux labels on share directories.
> > 
> > Please direct me to the FAQ for Samba & SELinux or
> > please tell me what I have to do to get samba shares
> > working.
> > 
> > In my case - I am getting permission denied in the audit
> > logs and in the message logs for nmbd, I am getting
> > directories do not exists errors (when they actually
> > do!).
> 
> /usr/sbin/setsebool -P samba_enable_home_dirs=1
> /usr/sbin/setsebool -P smbd_disable_trans=1
> 
> That's what I had to do to get samba working with home shares on FC5.

The second of these is turning off SELinux protection for the samba
server. It really shouldn't be necessary to do that if you're just
trying to share home directories (/home/*) using samba.

Paul.




More information about the fedora-selinux-list mailing list