- Having this Boolean enabled allows
smbdto write to a public directory, such as an area reserved for common files that otherwise has no special access restrictions.
- Having this Boolean enabled allows Samba to create new home directories independently. This is often done by mechanisms such as PAM.
- When enabled, this Boolean allows Samba to act as a domain controller, as well as giving it permission to execute related commands such as
- Enabling this Boolean allows Samba to share users' home directories.
- Export any file or directory, allowing read-only permissions. This allows files and directories that are not labeled with the
samba_share_ttype to be shared through Samba. When the
samba_export_all_roBoolean is enabled, but the
samba_export_all_rwBoolean is disabled, write access to Samba shares is denied, even if write access is configured in
/etc/samba/smb.conf, as well as Linux permissions allowing write access.
- Export any file or directory, allowing read and write permissions. This allows files and directories that are not labeled with the
samba_share_ttype to be exported through Samba. Permissions in
/etc/samba/smb.confand Linux permissions must be configured to allow write access.
- Having this Boolean enabled allows Samba to run unconfined scripts in the
- This Boolean must be enabled for Samba to share fusefs file systems.
- Disabling this Boolean prevents
smbdfrom having full access to NFS shares through Samba. Enabling this Boolean will allow Samba to share NFS volumes.
- Enable this Boolean to use a remote server for Samba home directories.
- Allow virtual machine access to CIFS files.
~]$Enter the following command to view description of a particular Boolean:
getsebool -a | grep service_name
~]$Note that the additional policycoreutils-devel package providing the
sepolicy booleans -b boolean_name
sepolicyutility is required for this command to work.