Data access to two daemon

Paul Howarth paul at city-fan.org
Wed Aug 22 08:35:39 UTC 2007


Arthur Pemberton wrote:
> I have a personal server setup with SELinux in targeted mode.
> 
> I would like to allow rw access over these files to Samba, and ro
> access to these files to httpd.
> 
> In my current setup, SELinux requires the security context of the
> respective daemon to allow access to them.
> 
> Since I gave Samba access more priority, the current context is:
> root:object_r:samba_share_t
> 
> The files are not owned by root, they are currently chowned pembo13:comrades.
> 
> Please advise on the best method to arrange for the access that I seem
> to require.

Use context type public_content_rw_t, and set the boolean 
allow_smbd_anon_write to 1.

Paul.




More information about the fedora-selinux-list mailing list