--- samba_selinux.8-orig 2007-01-02 18:03:55.000000000 -0500 +++ samba_selinux.8 2007-01-02 18:05:23.000000000 -0500 @@ -17,7 +17,7 @@ If you want to make this permanant, i.e. survive a relabel, you must add an entry to the file_contexts.local file. .TP /etc/selinux/POLICYTYPE/contexts/files/file_contexts.local -.br +.TP /var/eng(/.*)? system_u:object_r:samba_share_t .SH SHARING FILES @@ -26,27 +26,27 @@ setsebool -P allow_smbd_anon_write=1 .SH BOOLEANS -.br SELinux policy is customizable based on least access required. So by default SElinux policy turns off SELinux sharing of home directories and the use of Samba shares from a remote machine as a home directory. .TP If you are setting up this machine as a Samba server and wish to share the home directories, you need to set the samba_enable_home_dirs boolean. -.br - +.RS setsebool -P samba_enable_home_dirs 1 +.RE .TP If you want to use a remote Samba server for the home directories on this machine, you must set the use_samba_home_dirs boolean. -.br - +.RS setsebool -P use_samba_home_dirs 1 +.RE .TP You can disable SELinux protection for the samba daemon by executing: -.br - +.RS +.nf setsebool -P smbd_disable_trans 1 -.br -service smb restart +service smb restart +.fi +.RE .TP system-config-securitylevel is a GUI tool available to customize SELinux policy settings.