Pantek Library
Hosting Provided By
CybrHost
High Speed Hosting

Re: Selinux does not allow samba

From: Arthur Pemberton <pemboa(at)gmail.com>
Date: Thu Jan 31 2008 - 12:32:44 EST


On Jan 31, 2008 11:22 AM, Henning Larsen <hennlar@start.no> wrote:
> Hello
> On Thu, 2008-01-31 at 11:14 -0600, Arthur Pemberton wrote:
> > On Jan 31, 2008 4:08 AM, Henning Larsen <hennlar@start.no> wrote:
> > > Hello
> > >
> > > I get an alert from selinux, telling me to do:
> > >
> > > 'setsebool -P samba_export_all_ro=1'
> > >
> > > I did, but still cannot connect to the share from a other pc's.
> > > Do I have to reboot?
> > >
> > > ps. all booleans for samba is selected in selinux administration.
> > >
> > > Henning Larsen
> >
> >
> > Are you still getting alerts?
> >
> After doing that setsebool -P samba.... I still get alerts, but I found
> one solution via google, like this:
>
> # grep fusefs_t /var/log/audit/audit.log | audit2allow -M mysamba
> # semodule -i mysamba.pp
>
> This removes the alert, but I think it not is the proper way.
> Maybe it is a bug?.
> If so, how do I remove the modification I have made, when the bug is
> fixed?
>
> Thanks for helping.

Its definitely not the proper way for a program as popular as Samba. I have it running on a machine with SELinux myself so I know it works.

Do you have setroubleshoot installed? It helps troubleshoot these issues, often suggesting exactly what to do. and describing what happened as much as possible.

If you still have the full description of the issue, paste it here. If we can't understand it, try the selinux mailing list.

-- 
Fedora 7 : sipping some of that moonshine
( www.pembo13.com )

-- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: 
https://www.redhat.com/mailman/listinfo/fedora-list
Received on Thu Jan 31 12:33:15 2008

This archive was generated by hypermail 2.1.8 : Sun May 25 2008 - 05:22:46 EDT


Contact Us  Legal Notices  Order Services Online 
Pantek Home  Privacy Policy  IT news  Site Map  Pantek Library