Chapter 6. Network File System
NFS (Network File System) allows hosts to mount partitions on a remote system and use them as though they are local file systems. This allows the system administrator to store resources in a central location on the network, providing authorized users continuous access to them.
When running SELinux, the NFS
daemons are confined by default. SELinux policy does not allow NFS to share files by default. If you want to share NFS partitions, this can be configured via the nfs_export_all_ro
and nfs_export_all_rw
Booleans, as described in this section. These Booleans are however not required when files to be shared are labeled with the public_content_t
or public_content_rw_t
types. NFS can share files labeled with these types even if the nfs_export_all_ro
and nfs_export_all_rw
Booleans are off.