Red Hat Bugzilla – Bug 210768
SELinux targeted policy breaks SMB share
Last modified: 2007-11-30 17:11:45 EST
Description of problem:
I have two SMB shares, homes and shared. When SELinux is enforcing its targeted
policy, Samba is unable to export these shares.
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. Set SELinux to enforce its targeted policy.
2. Attempt to access SMB shares from another computer.
The shares cannot be accessed.
The shares should be accessible from a remote machine.
I use Kerberos to authenticate and LDAP for netowrk information. Everything
works fine when SELinux is in permissive mode.
Created attachment 138511 [details]
Audit log -- attempt to mount homes with SELinux enabled
Created attachment 138512 [details]
Audit log -- attempt to mount shared with SELinux enabled
Created attachment 138513 [details]
Audit log -- attempt to mount homes with SELinux permissive
Created attachment 138514 [details]
Audit log -- attempt to mount shared with SELinux permissive
setsebool samba_enable_home_dirs on
chcon -R -t samba_share_t <PATH TO SHARE>
Sorry about the noise.