Hi all,

I have created a directory /srv with the following SELinux context:

system_ubject_r:var_t

Now I want to create a subdirectory within /srv which should get a
different context. So I tried to set e.g.:

semanage fcontext -a -t samba_share_t /srv/samba
/sbin/restorecon -v /srv/samba

but the context is always reset to:

system_ubject_r:var_t

What am I missing?

Best Regards
Marcus
_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Marcus Moeller wrote:
> Hi all,
>
> I have created a directory /srv with the following SELinux context:
>
> system_ubject_r:var_t
>
> Now I want to create a subdirectory within /srv which should get a
> different context. So I tried to set e.g.:
>
> semanage fcontext -a -t samba_share_t /srv/samba
> /sbin/restorecon -v /srv/samba
>
> but the context is always reset to:
>
> system_ubject_r:var_t
>
> What am I missing?
>

Hi Marcus,

Try the following:

semanage fcontext -a -t samba_share_t "/srv/samba(/.*)?"


Ned

_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Ned Slider wrote:
> Marcus Moeller wrote:
>> Hi all,
>>
>> I have created a directory /srv with the following SELinux context:
>>
>> system_ubject_r:var_t
>>
>> Now I want to create a subdirectory within /srv which should get a
>> different context. So I tried to set e.g.:
>>
>> semanage fcontext -a -t samba_share_t /srv/samba
>> /sbin/restorecon -v /srv/samba
>>
>> but the context is always reset to:
>>
>> system_ubject_r:var_t
>>
>> What am I missing?
>>
>
> Hi Marcus,
>
> Try the following:
>
> semanage fcontext -a -t samba_share_t "/srv/samba(/.*)?"
>
>
> Ned
>


You may also need to manually change the context first:

chcon -v --type=samba_share_t /srv/samba




_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Dear Ned.

>
> You may also need to manually change the context first:
>
> chcon -v --type=samba_share_t /srv/samba

chcon did the trick.

Thanks a lot
Marcus
_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Marcus Moeller wrote:
> Dear Ned.
>
>> You may also need to manually change the context first:
>>
>> chcon -v --type=samba_share_t /srv/samba
>
> chcon did the trick.
>
> Thanks a lot
> Marcus

semanage will make the changes persistent through a complete filesystem
relabel (chcon will persist through a reboot, but not a relabel).

Cheers,

Ned


_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos