Re: Samba and Borg/fuse denied - ?
lejeczek <[email protected]> Fri, 22 Jul 2022 09:15:00 +0100
| Newsgroups | gmane.linux.redhat.fedora.selinux |
|---|---|
| Message-ID | <[email protected]> |
On 21/07/2022 17:11, Robin Lee Powell wrote: > > On Thu, Jul 21, 2022 at 02:33:31PM +0100, lejeczek wrote: >> Hi guys >> >> I see that: >> -> $ getsebool samba_share_fusefs >> samba_share_fusefs --> on >> >> but unless I put 'permissive' on or: >> -> $ semanage permissive --add smb_t >> then Samba will have not access to borg fuse mounts and denials are silent. >> >> Anybody would also think this can go as BZ or request for "enhancement"? >> All thoughts share are greatly appreciated. > I can't help with the actual issue, but the incantation for seeing > the silent denials is probably: sudo semanage dontaudit off My concern here is about 'samba_share_fusefs' - unless it's not what I thought it was. I see other domains have '_use_fusefs' - perhaps that is what Samba needs too @devel ? selinux-policy-3.14.3-104.el8.noarch thanks, L. _______________________________________________ selinux mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure