Re: Data access to two daemon

Arthur Pemberton wrote:
> I have a personal server setup with SELinux in targeted mode.
>
> I would like to allow rw access over these files to Samba, and ro
> access to these files to httpd.
>
> In my current setup, SELinux requires the security context of the
> respective daemon to allow access to them.
>
> Since I gave Samba access more priority, the current context is:
> root:object_r:samba_share_t
>
> The files are not owned by root, they are currently chowned pembo13:comrades.
>
> Please advise on the best method to arrange for the access that I seem
> to require.

Use context type public_content_rw_t, and set the boolean allow_smbd_anon_write to 1.

Paul. -- fedora-selinux-list mailing list fedora-selinux-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-selinux-list

• This message: [ Message body ]
• Next message: Stephen Smalley: "Re: F7 mls enforcing failed login and recursive fault"
• Previous message: Ken YANG: "Re: several problems after successful update, wine, texlive and selinux"
• In reply to: Arthur Pemberton: "Data access to two daemon"
• Next in thread: Stephen Smalley: "Re: Data access to two daemon"

• Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ]