samba_selinux_contexts:
- path: /var/lib/samba/bind-dns/dns.keytab
  setype: named_conf_t
- path: /var/lib/samba/private/dns.keytab
  setype: named_conf_t
- path: /var/lib/samba/bind-dns/named.conf.*
  setype: named_conf_t
- path: /var/lib/samba/bind-dns/dns(/.*)?
  setype: named_var_run_t
- path: /var/lib/samba/private/sam.ldb.d/metadata.tdb
  setype: named_var_run_t
- path: /var/lib/samba/private/sam.ldb.d/.*DNSZONES.*\.ldb
  setype: named_var_run_t
samba_firewall:
- dns
- kerberos
- 135/tcp
- ldap
- 389/udp
- samba
- kpasswd
- ldaps
- 3268/tcp
- 3269/tcp
- 49152-65535/tcp