[NFS-Ganesha-Support] Re: Proper selinux labelling for exported directory?
On 7/22/21 9:57 AM, Kaleb Keithley wrote:
On Thu, Jul 22, 2021 at 9:50 AM Lars Kellogg-Stedman <lars(a)redhat.com
<mailto:lars@redhat.com>> wrote:
On Thu, Jul 22, 2021 at 09:46:52AM -0400, Kaleb Keithley wrote:
> Have you installed the nfs-ganesha-selinux rpm?
I have...but I wouldn't expect that to allow ganesha to export
arbitrary directories (and it doesn't).
In general I've never had any issues exporting arbitrary directories
when running ganesha as root.
You aren't, by any chance, trying to run ganesha as non-root?
I realize I didn't mention it in the earlier message, but this question
is in the context of the VFS FSAL, if that matters.
Ganesha has default_t access for files and directories, so it should be
able to export any normally tagged directory structure. If the
structure has restrictive tags on it, I can imagine that Ganesha would
be blocked. In that case, I assume you'd allow it to "ganesha_t", right?
Daniel