> So I don't understand what's going on: the policy explicitly allows > domain smbd_t to perform search on home_root_t:dir and /home is already > labeled home_root_t. Yes, but it only does this when samba_enable_home_dirs is on. Toggle the boolean. -- Ivan Gyurdiev <ivg2@xxxxxxxxxxx> Cornell University -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx http://www.redhat.com/mailman/listinfo/fedora-selinux-list