On 21/07/2022 17:11, Robin Lee Powell wrote:
On Thu, Jul 21, 2022 at 02:33:31PM +0100, lejeczek wrote:
> Hi guys
>
> I see that:
> -> $ getsebool samba_share_fusefs
> samba_share_fusefs --> on
>
> but unless I put 'permissive' on or:
> -> $ semanage permissive --add smb_t
> then Samba will have not access to borg fuse mounts and denials are silent.
>
> Anybody would also think this can go as BZ or request for "enhancement"?
> All thoughts share are greatly appreciated.
I can't help with the actual issue, but the incantation for seeing
the silent denials is probably: sudo semanage dontaudit off
My concern here is
about 'samba_share_fusefs' - unless it's
not what I thought it was.
I see other domains have '_use_fusefs' - perhaps that is
what Samba needs too @devel ?
selinux-policy-3.14.3-104.el8.noarch
thanks, L.