3.4.2. Sharing NFS and CIFS file systems
By default, NFS mounts on the client side are labeled with a default context defined by policy for NFS file systems. In common policies, this default context uses the nfs_t
type. Also, by default, Samba shares mounted on the client side are labeled with a default context defined by policy. In common policies, this default context uses the cifs_t
type.
Depending on policy configuration, services may not be able to read files labeled with the nfs_t
or cifs_t
types. This may prevent file systems labeled with these types from being mounted and then read or exported by other services. Booleans can be turned on or off to control which services are allowed to access the nfs_t
and cifs_t
types.
Turn the httpd_use_nfs
Boolean on to allow httpd
to access and share NFS file systems (labeled with the nfs_t
type. Run the setsebool
command as the root user to turn the Boolean on:
setsebool -P httpd_use_nfs on
Turn the httpd_use_cifs
Boolean on to allow httpd
to access and share CIFS file systems (labeled with the cifs_t
type. Run the setsebool
command as the root user to turn the Boolean on:
setsebool -P httpd_use_cifs on
Do not use the -P
option if you do not want setsebool
changes to persist across reboots.