Proper selinux labelling for exported directory?
22 Jul
2021
22 Jul
'21
1:16 p.m.
Hello again, With selinux in enforcing mode, what's the correct way to export a directory with nfs-ganesha? There are few pages out there that suggest the following sequence: 1. setenforce 0 2. start nfs-ganesha 3. run audit2allow to generate a new selinux module 4. install the module But that seems overly broad, because you end up with rules that would allow ganesha to export anything, like: allow ganesha_t unlabeled_t:dir getattr; Is there an existing label I should apply to the exported directory so that ganesha can export it without errors? -- Lars Kellogg-Stedman <lars@redhat.com> | larsks @ {irc,twitter,github} http://blog.oddbit.com/ | N1LKS
1920
Age (days ago)
1920
Last active (days ago)
0 comments
1 participants
participants (1)
-
Lars Kellogg-Stedman