[CentOS] nfs mounted /home and selinux

Fri Oct 31 09:42:17 UTC 2008
Tony Molloy <tony.molloy at ul.ie>

On Thursday 30 October 2008 21:00:35 Marc Wiatrowski wrote:
> I'm trying to set the context on an nfs mounted /home.  I believe
> exactly like in Redhat's Deployment Guide at
>
> http://www.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5.2/html/Deployme
>nt_Guide/ch45s02s03.html
>
>
> On my system running CentOS 5.2:
>
> $ ls -alZ /home
> drwxr-xr-x  root root system_u:object_r:home_root_t    .
> drwxr-xr-x  root root system_u:object_r:root_t         ..
>

Yep, default settings for /home

> $ mount -t nfs -o context=user_u:object_r:user_home_dir_t \
>      server001a:/vol/vol01/home /home
>
> $ ls -alZ /home
> drwxrwxr-x  root         root    system_u:object_r:nfs_t          .
> drwxr-xr-x  root         root    system_u:object_r:root_t         ..
> drwx------  fred         users   system_u:object_r:nfs_t          fred
> drwx------  mike         users   system_u:object_r:nfs_t          mike
> drwx------  alice        users   system_u:object_r:nfs_t          alice

Yep that's an nfs mount so SELinux type is nfs. At least that's the way it 
looks on my system

ls -al /users/

drwx------  molloyt csstaff system_u:object_r:nfs_t:s0       network

Regards,

Tony
>
> $ mount -l
> server001a:/vol01/home on /home type nfs
> (rw,context="user_u:object_r:user_home_dir_t:s0",addr=10.1.1.11)
>
>
> Shouldn't the users be set to user_u:object_r:user_home_dir_t?  I feel
> like I am missing something simple...
>
> I don't see any avc or related syslog messages and the nfs server is an
> older netapp if that matters.
>
> thanks,
> marc
>
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> http://lists.centos.org/mailman/listinfo/centos