From f36d62b426c437fea829486b846fba284e6958b6 Mon Sep 17 00:00:00 2001
From: tigro <arkadiy.sheyn@softline.com>
Date: Sun, 16 Jul 2023 08:56:05 +0300
Subject: [PATCH] - Enable firewall for samba and samba-client - Enable
 selinuxuser_execmod bool

---
 MSVSphere-9-Workstation.ks | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/MSVSphere-9-Workstation.ks b/MSVSphere-9-Workstation.ks
index 3dfd835..a9d520d 100644
--- a/MSVSphere-9-Workstation.ks
+++ b/MSVSphere-9-Workstation.ks
@@ -13,7 +13,7 @@ shutdown
 # Network information
 network  --bootproto=dhcp --device=link --activate
 # Firewall configuration
-firewall --enabled --service=mdns
+firewall --enabled --service=mdns,samba,samba-client
 # Use network installation
 url --url="https://rsync.inferitos.ru/msvsphere/9/BaseOS/$basearch/os/"
 repo --name="BaseOS" --baseurl=https://rsync.inferitos.ru/msvsphere/9/BaseOS/x86_64/os/ --cost=200
@@ -436,7 +436,7 @@ flatpak remote-add --if-not-exists flathub https://flathub.org/repo/flathub.flat
 rm -f /etc/resolv.conf
 
 # fix Samba overview
-firewall-cmd --set-default-zone=internal
+#firewall-cmd --set-default-zone=internal
 
 # add us,ru layouts by default
 cat > /usr/share/glib-2.0/schemas/org.gnome.desktop.input-sources.gschema.override << FOE
@@ -494,6 +494,9 @@ DefaultSession=gnome-xorg.desktop
 #Enable=true
 FOE
 
+# Enable selinuxuser_execmod bool
+/usr/sbin/setsebool -P selinuxuser_execmod 1
+
 %end
 
 %packages