Re: [FC5] Samba and SELinux

[Bob Kashani <bobk ocf berkeley edu>]

On Thu, 2006-04-06 at 07:42 +0100, Paul Howarth wrote:
> On Wed, 2006-04-05 at 12:59 -0700, Bob Kashani wrote:
> > On Wed, 2006-04-05 at 10:59 -0700, Dan Thurman wrote:
> > > Folks,
> > > 
> > > What is the procedure for creating Samba shares and
> > > getting around the SELinux issues?
> > > 
> > > Samba by default no longer works with shares such
> > > as [homes] and any other added shares without administrator
> > > intervention to add SELinux labels on share directories.
> > > 
> > > Please direct me to the FAQ for Samba & SELinux or
> > > please tell me what I have to do to get samba shares
> > > working.
> > > 
> > > In my case - I am getting permission denied in the audit
> > > logs and in the message logs for nmbd, I am getting
> > > directories do not exists errors (when they actually
> > > do!).
> > 
> > /usr/sbin/setsebool -P samba_enable_home_dirs=1
> > /usr/sbin/setsebool -P smbd_disable_trans=1
> > 
> > That's what I had to do to get samba working with home shares on FC5.
> 
> The second of these is turning off SELinux protection for the samba
> server. It really shouldn't be necessary to do that if you're just
> trying to share home directories (/home/*) using samba.

For some odd reason I needed to add the second one to get things working
the first time around. I just tried it again without the second one and
everything works fine. I guess I did something wrong the first time. 

Thanks, for clarifying. :)

Bob

-- 
Bob Kashani
http://www.gnome.org/~bobk/