Re: [CentOS] How to have more than on SELinux context on a directory

You are looking for a man page, which usually belongs in a man section and is compressed. You can do: $ yum provides /usr/share/man/man8/tftpd_selinux.8.gz or, more generally: $ yum provides */tftpd_selinux* given the asterisk don't resolve to something already existing in your local dir... You

Re: [CentOS] How to have more than on SELinux context on a directory

Thanks Fabian, That's what I need! A bit more open than I wish but it is ok. One more thing... I got some problems to get the man page for tftpd_selinux. [ ]$ yum search tftpd_selinux Loaded plugins: fastestmirror, langpacks Determining fastest mirrors Warning: No matches found for: tftpd_selin

Re: [CentOS] How to have more than on SELinux context on a directory

On 06/07/16 21:17, Bernard Fay wrote: > I can access /depot/tftp from a tftp client but unable to do it from a > Windows client as long as SELinux is enforced. If SELinux is permissive I > can access it then I know Samba is properly configured. > > # getenforce > Enforcing > # ls -dZ /depot/tftp/

Re: [CentOS] How to have more than on SELinux context on a directory

I can access /depot/tftp from a tftp client but unable to do it from a Windows client as long as SELinux is enforced. If SELinux is permissive I can access it then I know Samba is properly configured. # getenforce Enforcing # ls -dZ /depot/tftp/ drwxrwxrwx. root root system_u:object_r:tftpdir_rw_

Re: [CentOS] How to have more than on SELinux context on a directory

If I understand well, I could add a type to another type?!?!?! No. The default targeted policy is mostly about Type Enforcement. Quote from the manual: "All files and processes are labeled with a type: types define a SELinux domain for processes and a SELinux type for files. SELinux policy

Re: [CentOS] How to have more than on SELinux context on a directory

On 07/06/2016 04:30 AM, Bernard Fay wrote: It is so complex and so badly documented. It is fairly complex, but I don't think it's badly documented. http://selinuxproject.org/page/Main_Page ___ CentOS mailing list CentOS@centos.org https://lists.cen

Re: [CentOS] How to have more than on SELinux context on a directory

2016-07-06 14:30 GMT+03:00 Bernard Fay : > If I understand well, I could add a type to another type?!?!?! If that is > the case, I did not know about it like many things in the SELinux > world. It is so complex and so badly documented. :-( > > > Poorly? Just read the documents: https://acce

Re: [CentOS] How to have more than on SELinux context on a directory

If I understand well, I could add a type to another type?!?!?! If that is the case, I did not know about it like many things in the SELinux world. It is so complex and so badly documented. :-( On Tue, Jul 5, 2016 at 1:24 PM, Александр Кириллов wrote: > Александр Кириллов писал 2016-07-

Re: [CentOS] How to have more than on SELinux context on a directory

Александр Кириллов писал 2016-07-05 19:58: I need to have the tftpdir_rw_t and samba_share_t SELinux context on the same directory. How can we do this? Is it feasible to have more than one SELinux context? I don't think it's possible/feasible. You'd probably need to add a new type and ne

Re: [CentOS] How to have more than on SELinux context on a directory

I need to have the tftpdir_rw_t and samba_share_t SELinux context on the same directory. How can we do this? Is it feasible to have more than one SELinux context? I don't think it's possible/feasible. You'd probably need to add a new type and necessary rules to your local policy. Or add

Re: [CentOS] How to have more than on SELinux context on a directory

On 07/05/2016 08:28 AM, Bernard Fay wrote: How can we do this? Is it feasible to have more than one SELinux context? Not as far as I know. You probably want to generate a local policy, using "audit2allow," to allow whatever workflow you're implementing.

[CentOS] How to have more than on SELinux context on a directory

Hello, I need to have the tftpdir_rw_t and samba_share_t SELinux context on the same directory. How can we do this? Is it feasible to have more than one SELinux context? Thanks, Bernard ___ CentOS mailing list CentOS@centos.org https://lists.centos