From Bugzilla Helper: User-Agent: Mozilla/5.0 (X11; U; Linux i586; en-US; rv:1.7.8) Gecko/20050524 Fedora/1.0.4-4 Firefox/1.0.4 Description of problem: When running selinux policy targeted with Allow Samba to share users directories and Allow users to login with CIFS home diesctoris checked I am now unable to acces a users home directory without now disabling protection for the smbd and nmbd demons. This did work OK at one point after being fixed erlier in the development cycle but I can't find what bug it was reported under. But it needs to be fixed again before FC4 release if possible. Version-Release number of selected component (if applicable): selinux-policy-targeted-1.23.16-6 How reproducible: Always Steps to Reproduce: see discription Actual Results: Shares are visible but you are unable to acces them. Expected Results: Able to acces the share and its contents. Additional info:
Thinking now I am not shure if this did ever work because I think that I am confusing it with another bug that I reported (157873) where you were unable to FTP into users home directories and it was this one that was fixed earlier in the release cycle.
Modified to FC4test3 to bring it to someones attention but the selinux-policy-targeted-1.23.16-6 is the current latest from development
Are you seeing any AVC messages in your log files? Dan
I will have a further look to see if there are any before I update the system with todays fixes and report back on what the state of play is both before and after the update. I am at work now but will have done the above by about 20:00 BST (19:00 GMT)
Created attachment 115103 [details] log extract as requested Having had a look at the logs I remembered that I had labeled the users home directory with "chcon -R -t ftpd_anon_t /home/bentledr" when trying to get ftp access to the users home directory which was fixed a while ago as a result of a previous bug report. So I forced a re-label on next reboot and all is now OK I assume chcon could have been used to remove the label but the above method was used in my haste to fix things. So this is not a bug please feel free to close it.
You can use restorecon to fix the labels on a homedir. restorecon -R -v /home/bentledr would work faster than a full relable. Dan