SELinux and samba

Question

I have to set SELinux setenforce Permissive in order to give access to my samba share. I wonder if there is proper way to configure SELinux policy for fedora 17 as good admins do.

Answer 1

you would need to use setsebool which will tell selinux to allow certain activities.

but first do this:

/usr/sbin/getsebool -a | grep samba

to see if selinux is already allowing samba activity.

if it isn't, here are some examples of what i would use (if i used selinux):

/usr/sbin/setsebool -P samba_enable_home_dir on
/usr/sbin/setsebool -P samba_export_all_rw on

or something comparable depending on what your goal is with how strict you are trying to make it

alternatively you can use system-config-selinux and check the options pertaining to samba