problems with tmpfs and relabeling

Bill Nottingham notting at redhat.com
Tue Apr 18 20:48:34 UTC 2006


Bill Nottingham (notting at redhat.com) said: 
> > > 	mount -o fscontext=system_u:object_r:fs_t:s0 ...
> > 
> > Considering this is scratch space that will be used just like
> > the 'stock' filesystem for various things (/var, /etc state
> > files, etc.), this seems to be the right solution. I'll try
> > this.
> 
> So, this doesn't work for me... the initial mount of the tmpfs
> fails (with no avc). Subsequent mounts succeed, but, well, at that point
> you're screwed.

Aha, it's failing because system_u:system_r:mount_t can't
relabel a filesystem to system_u:object_r:fs_t.

Bill




More information about the fedora-selinux-list mailing list