How to clear Samba through SELinux
Daniel J Walsh
dwalsh at redhat.com
Mon Oct 8 14:48:38 UTC 2012
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 10/07/2012 07:39 AM, Temlakos wrote:
> Everyone:
>
> I go through this exercise with every update. I have two machines on my
> network. One runs Windows; the other runs Fedora (now up to 17).
>
> Right now, the Fedora box can "see" everything in the Windows box that
> belongs to the default Windows user.
>
> But: the Windows box can see that a share is available but may not visit
> the share.
>
> I cleared Samba through the firewall; otherwise I'd have no connection at
> all.
>
> Now: what Booleans or modules do I need to set or reset to clear Samba
> through SELinux? I don't seem to have any configuration tool (not
> graphical, anyway) to let me see where the problem is. The Windows box
> doesn't say much, except "Windows cannot access this share; you need to
> talk to the system admin in charge of the other system." Well, I /am/ the
> system admin. I'd like to clear each machine for full read-write access to
> the other. But right now, I have to do all my sharing through the Fedora
> machine.
>
> (As to why I would even want a Windows machine around: I keep it around
> for programs like TV tuning and DVD authoring that /just work out of the
> box/. I also use that Windows box as a print server. That works.)
>
> So in essence, my Fedora box is a good client but a bad server. I think
> maybe SELinux is the one remaining obstacle. I need to know how to clear
> it.
>
> Temlakos -- selinux mailing list selinux at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/selinux
>
>
Try using the smbd_selinux man page
man smbd_selinux
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://www.enigmail.net/
iEYEARECAAYFAlBy58YACgkQrlYvE4MpobNcGACaA1cnA0etAGBQd5TVfqDkC5BE
4pIAoIT2LjwhiQnqzVq8LbDfSE8Eq6dO
=EOvw
-----END PGP SIGNATURE-----
More information about the selinux
mailing list