December 2020 - WLUG - wlug.mailman3.com

Happy New Year and more fun is in store for 2021

by Tim Keller

Hey Everybody! 2020 has been a hell of a thing. Thankfully WLUG continues to endure and I don't see the fun ending anytime soon. I suspect that for the foreseeable future we'll still be virtual, but there will be a day we're all in the same room together.. Stay safe and I hope to see you all soon on a Jitsi call! Later, Tim. WLUG President -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

Dec. 31, 2020

Re: Charter internet - lots of drops for others?

by John Stoffel

Hi all, I'd like to report (if I didn't before) that having Charter come up and replace the existing DOCIS 3.1 modem with one that does DOCIS 3.2 seems to have cleaned up and fixed alot of the problems. Or at least when it does drop, it re-connects much much faster so it's less of a pain in the ass. We will see how it all works out once we're all back in school/work full time remote next week. Happy Holidays to you all! John

Dec. 28, 2020

Re: Samba and SELinux

by John Stoffel

>>>>> "Chuck" == Chuck Anderson via WLUG <wlug(a)lists.wlug.org> writes: Chuck> If you don't have audit2why, first install it: Chuck> # yum install policycoreutils-python Chuck> Then you can run this command and it should tell you why it was Chuck> denied and propose way to fix it: Chuck> # cat /var/log/audit/audit.log* | audit2why Chuck> You can check these SELinux booleans and turn on the one(s) you Chuck> need, perhaps samba_enable_home_dirs or samba_export_all_ro/rw. This is damn genius! I wish there was a version for PAM as well, which is another damn black magic toolkit written by people way too smart for their own good. Keep it simple folks... Chuck> # getsebool -a|grep -i smb Chuck> smbd_anon_write --> off Chuck> # getsebool -a | grep -i samba Chuck> samba_create_home_dirs --> off Chuck> samba_domain_controller --> off Chuck> samba_enable_home_dirs --> off Chuck> samba_export_all_ro --> off Chuck> samba_export_all_rw --> off Chuck> samba_load_libgfapi --> off Chuck> samba_portmapper --> off Chuck> samba_run_unconfined --> off Chuck> samba_share_fusefs --> off Chuck> samba_share_nfs --> off Chuck> sanlock_use_samba --> off Chuck> tmpreaper_use_samba --> off Chuck> use_samba_home_dirs --> off Chuck> virt_use_samba --> off Chuck> e.g. Chuck> # setsebool -P samba_enable_home_dirs=on Chuck> On Sat, Dec 19, 2020 at 10:19:24PM -0500, Mher Mnatsakanyan via WLUG wrote: >> Hi everyone. >> >> I hope everything is well with all of you and yours. >> >> I have a question and need help please. >> >> I installed a Samba server on CentOS8 which works well. >> >> When I try to mount the share from that Samba server on the client side I >> get a permission denied error. When I set SELinux from Enforcing to >> Permissive mode it seems to be mounting and the permission denied error >> goes away. Any suggestions how I can do the same with SELinux enforcing >> mode? >> >> Thank you very much in advance. >> >> Respectfully, >> Mher Mnatsakanyan Chuck> _______________________________________________ Chuck> WLUG mailing list -- wlug(a)lists.wlug.org Chuck> To unsubscribe send an email to wlug-leave(a)lists.wlug.org Chuck> Create Account: https://wlug.mailman3.com/accounts/signup/ Chuck> Change Settings: https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ Chuck> Web Forum/Archive: https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/7I7X4…

Dec. 25, 2020

Re: Samba and SELinux

by Mher Mnatsakanyan

Cool On Sat, 19 Dec 2020 at 23:30, Chuck Anderson via WLUG <wlug(a)lists.wlug.org> wrote: > I think you should not need samba_export_all_ro/rw if you set > samba_share_t on the folder(s) you want to export (as long as the > shared folders are not standard directories like /usr). It just makes > things too permissive, negating some of the protection SELinux > provides by allowing Samba to read/write every file on the system, not > just the ones you've labelled samba_share_t. > > See: > > https://selinuxproject.org/page/SambaRecipes > > You may actually need a different fcontext pattern match to cover > subdirectories: > > # semanage fcontext -a -t samba_share_t "/samba(/.*?)" > # restorecon -R -v /samba > > > On Sat, Dec 19, 2020 at 11:05:11PM -0500, Mher Mnatsakanyan via WLUG wrote: > > I guess I asked this question too early. I figured this out running the > > following commands and the mount worked on the client side. > > > > # setsebool -P samba_export_all_ro=1 samba_export_all_rw=1 > > # semanage fcontext -a -t samba_share_t "/samba" > > # restorecon -v /samba > > > > Respectfully, > > Mher Mnatsakanyan > > > > On Sat, 19 Dec 2020 at 22:19, Mher Mnatsakanyan <mnatsmher(a)gmail.com> > wrote: > > > > > Hi everyone. > > > > > > I hope everything is well with all of you and yours. > > > > > > I have a question and need help please. > > > > > > I installed a Samba server on CentOS8 which works well. > > > > > > When I try to mount the share from that Samba server on the client > side I > > > get a permission denied error. When I set SELinux from Enforcing to > > > Permissive mode it seems to be mounting and the permission denied error > > > goes away. Any suggestions how I can do the same with SELinux enforcing > > > mode? > > > > > > Thank you very much in advance. > > > > > > Respectfully, > > > Mher Mnatsakanyan > _______________________________________________ > WLUG mailing list -- wlug(a)lists.wlug.org > To unsubscribe send an email to wlug-leave(a)lists.wlug.org > Create Account: https://wlug.mailman3.com/accounts/signup/ > Change Settings: > https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ > Web Forum/Archive: > https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/TEJE6… >

Dec. 20, 2020

Samba and SELinux

by Chuck Anderson

I think you should not need samba_export_all_ro/rw if you set samba_share_t on the folder(s) you want to export (as long as the shared folders are not standard directories like /usr). It just makes things too permissive, negating some of the protection SELinux provides by allowing Samba to read/write every file on the system, not just the ones you've labelled samba_share_t. See: https://selinuxproject.org/page/SambaRecipes You may actually need a different fcontext pattern match to cover subdirectories: # semanage fcontext -a -t samba_share_t "/samba(/.*?)" # restorecon -R -v /samba On Sat, Dec 19, 2020 at 11:05:11PM -0500, Mher Mnatsakanyan via WLUG wrote: > I guess I asked this question too early. I figured this out running the > following commands and the mount worked on the client side. > > # setsebool -P samba_export_all_ro=1 samba_export_all_rw=1 > # semanage fcontext -a -t samba_share_t "/samba" > # restorecon -v /samba > > Respectfully, > Mher Mnatsakanyan > > On Sat, 19 Dec 2020 at 22:19, Mher Mnatsakanyan <mnatsmher(a)gmail.com> wrote: > > > Hi everyone. > > > > I hope everything is well with all of you and yours. > > > > I have a question and need help please. > > > > I installed a Samba server on CentOS8 which works well. > > > > When I try to mount the share from that Samba server on the client side I > > get a permission denied error. When I set SELinux from Enforcing to > > Permissive mode it seems to be mounting and the permission denied error > > goes away. Any suggestions how I can do the same with SELinux enforcing > > mode? > > > > Thank you very much in advance. > > > > Respectfully, > > Mher Mnatsakanyan

Dec. 20, 2020

Re: Samba and SELinux

by Mher Mnatsakanyan

This is a perfect explanation Chuck. Thanks a lot :-) On Sat, 19 Dec 2020 at 23:24, Chuck Anderson via WLUG <wlug(a)lists.wlug.org> wrote: > If you don't have audit2why, first install it: > > # yum install policycoreutils-python > > Then you can run this command and it should tell you why it was denied and > propose way to fix it: > > # cat /var/log/audit/audit.log* | audit2why > > You can check these SELinux booleans and turn on the one(s) you need, > perhaps samba_enable_home_dirs or samba_export_all_ro/rw. > > # getsebool -a|grep -i smb > smbd_anon_write --> off > # getsebool -a | grep -i samba > samba_create_home_dirs --> off > samba_domain_controller --> off > samba_enable_home_dirs --> off > samba_export_all_ro --> off > samba_export_all_rw --> off > samba_load_libgfapi --> off > samba_portmapper --> off > samba_run_unconfined --> off > samba_share_fusefs --> off > samba_share_nfs --> off > sanlock_use_samba --> off > tmpreaper_use_samba --> off > use_samba_home_dirs --> off > virt_use_samba --> off > > e.g. > > # setsebool -P samba_enable_home_dirs=on > > > On Sat, Dec 19, 2020 at 10:19:24PM -0500, Mher Mnatsakanyan via WLUG wrote: > > Hi everyone. > > > > I hope everything is well with all of you and yours. > > > > I have a question and need help please. > > > > I installed a Samba server on CentOS8 which works well. > > > > When I try to mount the share from that Samba server on the client side I > > get a permission denied error. When I set SELinux from Enforcing to > > Permissive mode it seems to be mounting and the permission denied error > > goes away. Any suggestions how I can do the same with SELinux enforcing > > mode? > > > > Thank you very much in advance. > > > > Respectfully, > > Mher Mnatsakanyan > _______________________________________________ > WLUG mailing list -- wlug(a)lists.wlug.org > To unsubscribe send an email to wlug-leave(a)lists.wlug.org > Create Account: https://wlug.mailman3.com/accounts/signup/ > Change Settings: > https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ > Web Forum/Archive: > https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/7I7X4… >

Dec. 20, 2020

Samba and SELinux

by Chuck Anderson

If you don't have audit2why, first install it: # yum install policycoreutils-python Then you can run this command and it should tell you why it was denied and propose way to fix it: # cat /var/log/audit/audit.log* | audit2why You can check these SELinux booleans and turn on the one(s) you need, perhaps samba_enable_home_dirs or samba_export_all_ro/rw. # getsebool -a|grep -i smb smbd_anon_write --> off # getsebool -a | grep -i samba samba_create_home_dirs --> off samba_domain_controller --> off samba_enable_home_dirs --> off samba_export_all_ro --> off samba_export_all_rw --> off samba_load_libgfapi --> off samba_portmapper --> off samba_run_unconfined --> off samba_share_fusefs --> off samba_share_nfs --> off sanlock_use_samba --> off tmpreaper_use_samba --> off use_samba_home_dirs --> off virt_use_samba --> off e.g. # setsebool -P samba_enable_home_dirs=on On Sat, Dec 19, 2020 at 10:19:24PM -0500, Mher Mnatsakanyan via WLUG wrote: > Hi everyone. > > I hope everything is well with all of you and yours. > > I have a question and need help please. > > I installed a Samba server on CentOS8 which works well. > > When I try to mount the share from that Samba server on the client side I > get a permission denied error. When I set SELinux from Enforcing to > Permissive mode it seems to be mounting and the permission denied error > goes away. Any suggestions how I can do the same with SELinux enforcing > mode? > > Thank you very much in advance. > > Respectfully, > Mher Mnatsakanyan

Dec. 20, 2020

Re: Gamerzilla at GamingOnLinux

by Mher Mnatsakanyan

I guess I asked this question too early. I figured this out running the following commands and the mount worked on the client side. # setsebool -P samba_export_all_ro=1 samba_export_all_rw=1 # semanage fcontext -a -t samba_share_t "/samba" # restorecon -v /samba Respectfully, Mher Mnatsakanyan On Sat, 19 Dec 2020 at 22:19, Mher Mnatsakanyan <mnatsmher(a)gmail.com> wrote: > Hi everyone. > > I hope everything is well with all of you and yours. > > I have a question and need help please. > > I installed a Samba server on CentOS8 which works well. > > When I try to mount the share from that Samba server on the client side I > get a permission denied error. When I set SELinux from Enforcing to > Permissive mode it seems to be mounting and the permission denied error > goes away. Any suggestions how I can do the same with SELinux enforcing > mode? > > Thank you very much in advance. > > Respectfully, > Mher Mnatsakanyan > > On Sat, 12 Dec 2020 at 06:33, Dennis Payne via WLUG <wlug(a)lists.wlug.org> > wrote: > >> I wrote an article for GamingOnLinux about the current state of >> Gamerzilla. >> >> >> https://www.gamingonlinux.com/2020/12/open-source-game-achievements-with-ga… >> >> >> >> -- >> >> Dennis Payne >> dulsi(a)identicalsoftware.com >> https://social.freegamedev.net/channel/dulsi >> _______________________________________________ >> WLUG mailing list -- wlug(a)lists.wlug.org >> To unsubscribe send an email to wlug-leave(a)lists.wlug.org >> Create Account: https://wlug.mailman3.com/accounts/signup/ >> Change Settings: >> https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ >> Web Forum/Archive: >> https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/CK65W… >> >

Dec. 20, 2020

Re: Gamerzilla at GamingOnLinux

by Mher Mnatsakanyan

Hi everyone. I hope everything is well with all of you and yours. I have a question and need help please. I installed a Samba server on CentOS8 which works well. When I try to mount the share from that Samba server on the client side I get a permission denied error. When I set SELinux from Enforcing to Permissive mode it seems to be mounting and the permission denied error goes away. Any suggestions how I can do the same with SELinux enforcing mode? Thank you very much in advance. Respectfully, Mher Mnatsakanyan On Sat, 12 Dec 2020 at 06:33, Dennis Payne via WLUG <wlug(a)lists.wlug.org> wrote: > I wrote an article for GamingOnLinux about the current state of Gamerzilla. > > > https://www.gamingonlinux.com/2020/12/open-source-game-achievements-with-ga… > > > > -- > > Dennis Payne > dulsi(a)identicalsoftware.com > https://social.freegamedev.net/channel/dulsi > _______________________________________________ > WLUG mailing list -- wlug(a)lists.wlug.org > To unsubscribe send an email to wlug-leave(a)lists.wlug.org > Create Account: https://wlug.mailman3.com/accounts/signup/ > Change Settings: > https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ > Web Forum/Archive: > https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/CK65W… >

Dec. 20, 2020

Gamerzilla at GamingOnLinux

by Dennis Payne

I wrote an article for GamingOnLinux about the current state of Gamerzilla. https://www.gamingonlinux.com/2020/12/open-source-game-achievements-with-ga… -- Dennis Payne dulsi(a)identicalsoftware.com https://social.freegamedev.net/channel/dulsi

Dec. 12, 2020