Re: sharing an object with two subjects, with mutltiple types ?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Kevin Verma wrote:

But I want to have a read-only access to this public repository. How to ?
On 9/29/05, Daniel J Walsh <dwalsh@xxxxxxxxxx> wrote:
Kevin Verma wrote:

Hi,

Is it possible to share a data repositry with two catagories of
subjects. For example, I hit a bump for sharing a data repository
among both httpd and samba (on FC4).

Thanks for reading,

--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list


public_content_t and public_content_rw_t  (Used to be ftpd_anon_t and
ftpd_anon_rw_t).

If you need a particular domain to write to a sharded directory/file you
need to set the appropriate boolean
allow_DOMAIN_anon_write

So to allow samba to write to public_content_rw_t, you would set the boolean

setsebool -P allow_smb_anon_write=1



--




--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list
If you don't set the boolean, that domain will not have access.

There is a bug in current policy where if you don't set the boolean for a domain, it does not get
read access to the public_content_rw_t directory.



--


--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux