The kernel version is 2.6.18-8.1.1.el5, and the version of nfs-utils is 1:1.0.9-16.el5.
I do already have the same file system automounted elsewhere. Is that causing the problem?
By the way, can mount point labels be applied to automounted file systems? If so, how would I do that? Would I put the label into the automount file (auto.*) in the /etc directory?
-----Original Message----- From: Stephen Smalley [mailto:sds@tycho.nsa.gov] Sent: Tuesday, May 01, 2007 7:30 AM To: Clarkson, Mike R (US SSA) Cc: fedora-selinux-list@redhat.com; Daniel J Walsh; Eric Paris Subject: Re: mount point labels
On Mon, 2007-04-30 at 17:37 -0700, Clarkson, Mike R (US SSA) wrote:
I'm attempting to create the labeled mount point with the following command:
mount -t nfs -o context=system_u:object_r:import_file_t:s0
nas:/vol/home /home/SimulatedImport/output/home
The mount point is created without any errors, but the label that I specify in the mount command is not used. Instead of system_u:object_r:import_file_t, the context of the /home/SimulatedImport/output/home is system_u:object_r:nfs_t:s0.
ls -dZ /home/SimulatedImport/output/home drwxr-xr-x root root
system_u:object_r:nfs_t:s0
/home/m252/SimulatedImport/output/home
I'm running RHEL5 with a policy built as mls off of the targeted policy.
Does anyone know why the context label is not taking?
Do you already have the same filesystem mounted elsewhere? What versions of kernel and nfs-utils do you have?