[Linux-cluster] GFS w/ SELinux xattr issue

Markjan de Jong dejongm at TEOCO.com
Tue Mar 18 14:58:20 UTC 2008


On Tue, 18 Mar 2008 14:31:05 +0000, Steven Whitehouse wrote:

>> I'm having an issue with GFS, GFS2 and selinux xattrs. When I set the
>> security context on one host, that security context is not applied on
>> the other hosts.
>> 
>Does this relate to GFS or GFS2 or both?
>
This relates to both GFS and GFS2 mounts.

>> MY GFS2 FS is mounted on /opt/xen_shared.
>> 
>> Host XEN01 shows one context:
>> 
>> [root xen01 xen_shared]# ls -Z /opt/xen_shared/test 
>> -rw-r--r-- root root user_u:object_r:etc_t /opt/xen_shared/test
>> 
>> While XEN02 shows another:
>> 
>> [root xen02 xen_shared]# ls -Z /opt/xen_shared/test 
>> -rw-r--r-- root root user_u:object_r:file_t /opt/xen_shared/test
>> 
>> Both hosts show that the GFS2 file systems are mounted with the "use
>> xattr" genfs_context. This is also the case with a GFS v1 mount. Any
>> thoughts?
>> 
>> 
>> Thanks!
>> 
> Assuming that you've got lock_dlm on each node, and correctly configured
> then it does look like a bug, so please file a report at
> bugzilla.redhat.com. What kernel version are you using?

Currently kernel 2.6.18-53.1.14.el5xen #1 SMP Wed Mar 5 12:08:17 EST 2008 x86_64 x86_64 x86_64 GNU/Linux. Yes lock_dlm is enabled on each node.
I'll file a bug report.

In the mean time... Thanks johannes for the work-around!

-Mark




More information about the Linux-cluster mailing list