Re: [CentOS] nfs mounted /home and selinux

2008-10-31 Thread Tony Molloy
On Thursday 30 October 2008 21:00:35 Marc Wiatrowski wrote:
 I'm trying to set the context on an nfs mounted /home.  I believe
 exactly like in Redhat's Deployment Guide at

 http://www.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5.2/html/Deployme
nt_Guide/ch45s02s03.html


 On my system running CentOS 5.2:

 $ ls -alZ /home
 drwxr-xr-x  root root system_u:object_r:home_root_t.
 drwxr-xr-x  root root system_u:object_r:root_t ..


Yep, default settings for /home

 $ mount -t nfs -o context=user_u:object_r:user_home_dir_t \
  server001a:/vol/vol01/home /home

 $ ls -alZ /home
 drwxrwxr-x  root rootsystem_u:object_r:nfs_t  .
 drwxr-xr-x  root rootsystem_u:object_r:root_t ..
 drwx--  fred users   system_u:object_r:nfs_t  fred
 drwx--  mike users   system_u:object_r:nfs_t  mike
 drwx--  aliceusers   system_u:object_r:nfs_t  alice

Yep that's an nfs mount so SELinux type is nfs. At least that's the way it 
looks on my system

ls -al /users/

drwx--  molloyt csstaff system_u:object_r:nfs_t:s0   network

Regards,

Tony

 $ mount -l
 server001a:/vol01/home on /home type nfs
 (rw,context=user_u:object_r:user_home_dir_t:s0,addr=10.1.1.11)


 Shouldn't the users be set to user_u:object_r:user_home_dir_t?  I feel
 like I am missing something simple...

 I don't see any avc or related syslog messages and the nfs server is an
 older netapp if that matters.

 thanks,
 marc

 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] nfs mounted /home and selinux

2008-10-30 Thread Marc Wiatrowski
I'm trying to set the context on an nfs mounted /home.  I believe
exactly like in Redhat's Deployment Guide at

http://www.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5.2/html/Deployment_Guide/ch45s02s03.html


On my system running CentOS 5.2:

$ ls -alZ /home
drwxr-xr-x  root root system_u:object_r:home_root_t.
drwxr-xr-x  root root system_u:object_r:root_t ..

$ mount -t nfs -o context=user_u:object_r:user_home_dir_t \
 server001a:/vol/vol01/home /home

$ ls -alZ /home
drwxrwxr-x  root rootsystem_u:object_r:nfs_t  .
drwxr-xr-x  root rootsystem_u:object_r:root_t ..
drwx--  fred users   system_u:object_r:nfs_t  fred
drwx--  mike users   system_u:object_r:nfs_t  mike
drwx--  aliceusers   system_u:object_r:nfs_t  alice

$ mount -l
server001a:/vol01/home on /home type nfs
(rw,context=user_u:object_r:user_home_dir_t:s0,addr=10.1.1.11)


Shouldn't the users be set to user_u:object_r:user_home_dir_t?  I feel
like I am missing something simple...

I don't see any avc or related syslog messages and the nfs server is an
older netapp if that matters.

thanks,
marc

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos