[Samba] NT_STATUS_ACCESS_DENIED and SELinux

[simo]

On Fri, 2007-04-06 at 22:28 -0400, Brandon Blackmoor wrote:
> Having made that change, I copied my /media directory back to /var/media,
> changed the samba config appropriately, set permissions to "user", created the
> needed users, and now it seems to work the way all of the How-Tos and manuals
> say that it should.
> 
> It would appear from the general bafflement this error caused that not many
> people run SELinux and Samba at the same time.
> 
> Live and learn. Thanks for the attempts at helping me.

We are working to improve compatibility between SELinux and samba (F7
will have much better defaults and also some comments in smb.conf to
help with it).

SELinux constrain samba and prevents it from access directories if they
are not labeled appropriately.

If you create new directories to share them you should mark them as
samba_share_t.
Use: chcon -R -t samba_share_t /your/path

But, make sure you don't change system directories types, or you could
compromise other daemons.

Simo.

-- 
Simo Sorce
Samba Team GPL Compliance Officer
email: idra at samba.org
http://samba.org