Add support for 'gpfs.vfs' backend variant #90
Conversation
Now it's possible to use the 'vfs' variant of the GPFS backend. With it, the gpfs VFS module is automatically configured to be used by Samba. The GPFS VFS module dynamically loads libgpfs.so library, which requires access to some resources that are not granted by default by SElinux. The Storage Scale product solves this by running smbd process unconfined, so the same solution has been applied here. Signed-off-by: Xavi Hernandez <[email protected]>
|
This patch doesn't add any specific GPFS configuration, I think most of the default values are already ok, but I'll address that in a future patch. Also, acl_xattr is left enabled for now, but I think GPFS doesn't need it when vfs_gpfs is used. |
There was a problem hiding this comment.
I initially thought we could use the se boolean samba_run_unconfined instead of relabelling the samba binary. However it appears I was wrong.
samba_run_unconfined
Having this Boolean enabled allows Samba to run unconfined scripts in the /var/lib/samba/scripts/ directory.
ACKing these changes.
On top of it, looking at the following AVC, access is happening via character file. |
Now it's possible to use the 'vfs' variant of the GPFS backend. With it, the gpfs VFS module is automatically configured to be used by Samba.
The GPFS VFS module dynamically loads libgpfs.so library, which requires access to some resources that are not granted by default by SElinux. The Storage Scale product solves this by running smbd process unconfined, so the same solution has been applied here.