Poster of Linux kernelThe best gift for a Linux geek
nfs_selinux

nfs_selinux

Section: NFS SELinux Policy documentation (8) Updated: 9 Feb 2009
Local index Up
 

NAME

nfs_selinux - Security Enhanced Linux Policy for NFS  

DESCRIPTION

Security Enhanced Linux secures the NFS server via flexible mandatory access control.  

BOOLEANS

SELinux policy is customizable based on the least level of access required. SELinux can be configured to not allow NFS to share files. If you want to share NFS partitions, and only allow read-only access to those NFS partitions, turn the nfs_export_all_ro boolean on:

setsebool -P nfs_export_all_ro 1
If you want to share files read/write you must set the nfs_export_all_rw boolean.
setsebool -P nfs_export_all_rw 1

These booleans are not required when files to be shared are labeled with the public_content_t or public_content_rw_t types. NFS can share files labeled with the public_content_t or public_content_rw_t types even if the nfs_export_all_ro and nfs_export_all_rw booleans are off.

If you want to use a remote NFS server for the home directories on this machine, you must set the use_nfs_home_dirs boolean:
setsebool -P use_nfs_home_dirs 1
system-config-selinux is a GUI tool available to customize SELinux policy settings.
 

AUTHOR  

This manual page was written by Dan Walsh <dwalsh@redhat.com>.

 

SEE ALSO

selinux(8), chcon(1), setsebool(8)


 

Index

NAME
DESCRIPTION
BOOLEANS
AUTHOR 
SEE ALSO

This document was created by man2html, using the manual pages.
Time: 22:02:02 GMT, April 16, 2011