carl verbiest's questions

Running RedHat 7.4

Until recently I could use

semanage fcontext -a -t public_content_rw_t '/var/www(/.*)?'
restorecon -R /var/www

from answer https://serverfault.com/a/346779/125461 on How do I get SELinux to allow Apache and Samba on the same folder?.

but public_content_rw_t no longer works for tomcat (tomcat-7.0.76-2.el7.noarch)

I managed to get past the issue by using

semanage permissive -a tomcat_t 

but I'm looking for a context that allows tomcat & httpd to read and samba to read and write, or a context that allows rw to tomcat, httpd & samba.

Alternatively, is it possible to change the context tomcat uses to the httpd context ?

Mounts are, sometimes, swapped at boot /usr2 becomes /tmp and /tmp becomes /usr2. This causes disaster because /tmp cleanup cron entries start acting on the /usr2 mount.

/etc/fstab contents

/dev/mapper/rhel-root   /                       xfs     defaults        0 0
UUID=****************** /boot                   ext4    defaults        1 2
/dev/mapper/rhel-swap   swap                    swap    defaults        0 0
/dev/sdb1       /data   ext4    data=ordered,relatime   0       0
/dev/sdd1       /usr2   ext4    defaults        0       0
/dev/sdc1       /tmp    ext4    defaults        0       0

How can I prevent the system from booting or from mounting the drives if this occurs? I'm trying to add some kind of safeguard in case the root issue occurs.

In the past we used winbind to integrate our RedHat servers with the Active Directory, we switched to using realmd and sssd. winbind provides a tool wbinfo to query user/group properties.

e.g. wbinfo --uid-info id

Does sssd provide a similar tool ?

I installed sssd-tools but that seems to be a collection of tools to add/delete/modify users and groups.

I need to translate a uid provided by smbstatus into a username