Re: Data access to two daemon

[Paul Howarth <paul city-fan org>]

Arthur Pemberton wrote:
> I have a personal server setup with SELinux in targeted mode.
>
> I would like to allow rw access over these files to Samba, and ro
> access to these files to httpd.
>
> In my current setup, SELinux requires the security context of the
> respective daemon to allow access to them.
>
> Since I gave Samba access more priority, the current context is:
> root:object_r:samba_share_t
>
> The files are not owned by root, they are currently chowned pembo13:comrades.
>
> Please advise on the best method to arrange for the access that I seem
> to require.

Use context type public_content_rw_t, and set the boolean 
allow_smbd_anon_write to 1.

Paul.