[linux-cifs-client] Issue with mount.cifs BUT ONLY on RAID volumes... selinux on

RogerSalisbury rojee at exemail.com.au
Sat Sep 15 17:36:21 GMT 2007


Cool
I will try tomorrow.
currently 3.30AM --- time for some sleep. 


simo-7 wrote:
> 
> On Sat, 2007-09-15 at 08:31 -0700, RogerSalisbury wrote:
>> This seems to be an SELINUX issue.
>> 
>> Failing to mount on raid volumes ONLY &  only when selinux is
>> enforcing.
>> 
>> selinux  messages are lacking & show no such violation
>> in /var/log/messages.
> 
> SELinux should lo in /var/log/audit/audit.log
> 
> You can use audit2allow to convert the AVC messages there into a policy
> to allow these operations.
> 
> However if you just want to share a new mount point, all you have to do
> is to mark the files in there as samba_share_t with the following
> command:
> chcon -R -t samba_share_t DIR
> where DIR is the (mounted) filesystem root.
> 
> Use ls -Z to see if they are correctly labeled.
> 
> 
> Other bools you may enable wrt samba are:
> samba_enable_home_dirs
> samba_export_all_ro
> samba_export_all_rw
> use_samba_home_dirs
> 
> you can get the complete list for your system with:
> getsebool -a |grep samba
> 
> setting any of them is as easy as:
> setsebool <opt-name> on
> (use -P to make it persistent across reboots)
> 
> 
> 
> RTM: chcon, etsebool, setsebool, audit2allow
> 
> 
> Simo.
> 
> -- 
> Simo Sorce
> Samba Team GPL Compliance Officer
> email: idra at samba.org
> http://samba.org
> 
> _______________________________________________
> linux-cifs-client mailing list
> linux-cifs-client at lists.samba.org
> https://lists.samba.org/mailman/listinfo/linux-cifs-client
> 
> 

-- 
View this message in context: http://www.nabble.com/Issue-with-mount.cifs-BUT-ONLY-on-RAID-volumes...-selinux-on-tf4448043.html#a12692181
Sent from the Samba - linux-cifs-client mailing list archive at Nabble.com.



More information about the linux-cifs-client mailing list