How to allow Samba server from Selinux firewall in CentOS

rahilmaknojia · 06-08-2009, 01:10 PM

Hello,

I'm using CentOS 5.3, and I want to allow my samba server from selinux. I disabled my selinux and it works fine, but I want to keep my seline firewall on and want to allow other workstation to access my samba server.

Does any buddy have idea ?

jimbo1708 · 06-08-2009, 01:13 PM

I am not really sure what you are asking. Samba runs on 139 and 445 if you are asking for the ports to allow?

rahilmaknojia · 06-08-2009, 01:53 PM

No, I am trying to say how to allow samba from SElinux, because when I disable SElinux I can share my data on the network. But for some reason when I enable SELinux, I can't access to my share folder. So what I want to do is to allow Samba from SElinux,so I don't have to turn off SElinux.

jimbo1708 · 06-08-2009, 01:58 PM

sorry, I don't really use selinux

worm5252 · 06-08-2009, 02:00 PM

rahilmaknojia,
I think the confusion here is what you are describing. I think I understand you. Correct me if I am wrong.

You have a network of machines with Samba shares. 1 of those machines is SELINUX. Everything works fine as long as SELINUX is turned off. However if that machine is on, none of your samba shares work.

Am I correct?

rahilmaknojia · 06-08-2009, 02:09 PM

Yes, you are right and I want to use Samba to share on the network with SElinux "ON"

Do you have any idea ?

chrism01 · 06-09-2009, 02:09 AM

semanage fcontext -l |grep samba
getsebool -a | grep samba

Eg to enable logons to home dirs

setsebool -P samba_enable_home_dirs on

rahilmaknojia · 06-09-2009, 10:53 AM

Thanks Chrism01, you rock it works

rahilmaknojia · 06-09-2009, 10:57 AM

Anyways, what is the use of this command "semanage fcontext -l |grep samba"