dustin
/
configpolicy
1
1
Fork 0
Code Issues Releases Activity

samba-dc: Install dch-selinux 

The *dch-selinux* package contains a SELinux policy module for Samba AD
DC.  This policy defines a `samba_t` domain for the `samba` process.
While the domain is (currently) unconfined, it is necessary in order to
provide a domain transition rule for `winbindd`.  Without this rule,
`winbindd` would run in `unconfined_service_t`, which causes its IPC
pipe files to be incorrectly labelled, preventing other confined
services like `sshd` from accessing them.
btop
Dustin 2022-12-20 15:19:56 -06:00
parent 4bc587e408
commit f0a70c70e5
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
samba-dc.yml
View File

@ -2,6 +2,7 @@
serial: 1 serial: 1
roles: roles:
- kerberos - kerberos
- dch-selinux
- samba-dc - samba-dc
tasks: tasks:
- name: set samba configuration facts - name: set samba configuration facts