On Fri, 2005-01-07 at 13:29 -0700, Ivan Gyurdiev wrote: > > You have /root on this share? Interesting. I'm not sure you can do > > what I describe below in /root. > > No I don't. That's what the avc output says. I have no idea why it says > that - I guess it prints the path relative to the volume mount point, > not to the global /. Right, it does. I was blurry eyed this morning. :) I thought I understood what was happening to you. Are you running the strict or rawhide policy? Samba wasn't covered in the targeted policy for FC3, so /usr/sbin/smbd wouldn't have the type smb_t under that policy > > Try relabeling the portions of /data that you want to have > > user_home_dir_t and user_home_t: > > > > chcon -t user_home_dir_t /data/smb > > cd /data/smb > > chcon -R -r user_home_t ./* > > That sounds like a hack. This isn't a home directory so why > should I label it as such. It's a bunch of common files. > In addition to that I want home directories under /home. > Since smbd currently fails to read even those, how would labeling > /data user_home_t help? Sorry, I misread your intent, I thought your task was mounting home directories. I don't have a modern strict or rawhide targeted policy installed anywhere right now and I would need that to analyze what the policy is regulating against what you are trying to do. > Part of the problem in my mind is that I do not know what > the SElinux types are, which ones I need to do what I want, > and how to add new ones to perform this simple task. In the targeted policy, you won't have to worry about that. Choosing to run the strict or rawhide policy puts you in an area that is more complex. If you accept that complexity, you accept that you are going to need to customize policy or file bugs/feature requests (as Dan Walsh requested.) The documentation is catching up with the code. Slowly. :/ - Karsten -- Karsten Wade, RHCE, Sr. Tech Writer a lemon is just a melon in disguise http://people.redhat.com/kwade/ gpg fingerprint: 2680 DBFD D968 3141 0115 5F1B D992 0E06 AD0E 0C41
