Shintaro Fujiwara wrote:
Next, I commanded,
# restorecon -R -v /mnt
and /mnt/path became mnt_t.
In that, I failed both read nor write.
restorecon looks at the global SELinux policy. Of course it would fail
after running that command. :)
I made local module by audit2allow and installed by semodule -i.
Of course, I restoreconed.
I failed again.
I did
# touch /.autorelabel
# shutdown -r now
I failed.
security context of /mnt/path is still mnt_t.
How can I set security context of /mnt/path to samba_share_t not using chcon ?
I guess we'll need to see what your local module looks like.