Ned Slider wrote:

Marcus Moeller wrote:

...

Hi all,

I have created a directory /srv with the following SELinux context:

system_u:object_r:var_t

Now I want to create a subdirectory within /srv which should get a different context. So I tried to set e.g.:

semanage fcontext -a -t samba_share_t /srv/samba /sbin/restorecon -v /srv/samba

but the context is always reset to:

system_u:object_r:var_t

What am I missing?

Hi Marcus,

Try the following:

semanage fcontext -a -t samba_share_t "/srv/samba(/.*)?"

Ned

You may also need to manually change the context first:

chcon -v --type=samba_share_t /srv/samba

Marcus Moeller wrote:

Dear Ned.

...

You may also need to manually change the context first:

chcon -v --type=samba_share_t /srv/samba

chcon did the trick.

Thanks a lot Marcus

semanage will make the changes persistent through a complete filesystem relabel (chcon will persist through a reboot, but not a relabel).

Cheers,

Ned