Red Hat Bugzilla – Bug 431552
Nautilus-share does not work.
Last modified: 2008-11-17 17:02:55 EST
Description of problem:
The problem is as simple as the summary says: Nautilus-share does not work
without further manual configuration.
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. Right click on a folder in Nautilus.
2. Click Sharing Option and share folder.
3. Watch the error msg.
First it complains that usershare is not enables. The after I edit smb.conf
according to the settings found on the Nautilus-share website, it complains that
it cannot stat the path to ensure that it is a folder. This is solved by setting
SELinux to Permissive.
Nautilus-share just works(tm).
Please provide the AVC message generated by SELinux. Reassigning to selinux-policy.
Created attachment 293997 [details]
SELinux alert msg.
I've attached the avc msg. Should I open another bug related to the manual
configuration required for nautilus-share?
This is probably SELinux bug, not mine.
Configuration of nautilus-share is provided in doc dir in INSTALL file.
Please follow the instructions.
I'll post some additional comments here that are related to the first problem
(not the SELinux issue).
1. The SELinux issue should have been detected during review; I would expect
that packagers and reviewers make sure that packages work under a standard
Fedora setup, which includes SELinux and a firewall. In this case, both had to
be disables (forgot to mention the fw issue initially).
2. I think the level of manual interaction is fairly high given the target group
of this program. Perhaps a nautilus-share-smb.conf file with the settings given
in the instructions could be provided as a part of the package, and then the
conf-file could simpy be included in smb.conf. I would also recommend adding a
README.fedora which tells the user to punch a hole in his or her fw and to
include the conf file in the main smb.conf.
(Well... My comment #5 also comments on the SELinux issue, which contradicts the
introduction to my comment :-) )
All tools should be tested in enforcing mode to make sure these bugs do not
sneak out. Could you put your machine in permissive mode and run the command.
We need to collect all of the AVC messages from /var/log/audit/audit.log
Please open another bug for the non-SELinux part of this. That does belong to
Jakub, not Dan.
Created attachment 294077 [details]
Complete AVC log
Here is the complete audit.log. Please let me know if you need anything else.
You can allow this for now by executing
# audit2allow -M mypol -i /var/log/audit/audit.log
# semodule -i mypol.pp
Fixed in selinux-policy-3.0.8-84.fc8
What do I need to do to set this up for testing. I installed nautilus-share and
started smb and nmb Is there something else I need to do to test? I don't see
anything that says share the folder? Do I need to change smb.conf?
Fixed in selinux-policy-3.0.8-89.fc8
Closing all bugs that have been in modified for over a month. Please reopen if the bug is not actually fixed.