Hi! What's the proper security context of credentials file used by mount.cifs? samba_selinux did not help me and cifs_t is not what I am looking for: audit(1173946014.366:6): avc: denied { read } for pid=2237 comm="mount.cifs" name=".smbcredential-polsl" dev=sda1 ino=2195809 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:object_r:cifs_t:s0 tclass=file I've got this line in my fstab: //dionizos/usr /srv/dionizos cifs credentials=/root/.smbcredential-polsl,uid=gajownik,gid=users,file_mode=0666,dir_mode=0777 0 0

On 3/16/07, Paul Howarth <paul(a)city-fan.org&gt; wrote: > You're probably having problems with trying to read /root before you > even get to the credentials file. What I use is this: May I ask you what version of selinux-policy-targeted do you have in your system? I changed configuration and still have AVC messages: audit(1174047007.131:6): avc: denied { read } for pid=2242 comm="mount.cifs" name="smbcredential-polsl" dev=sda1 ino=131578 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:object_r:samba_etc_t:s0 tclass=file [gajownik@cyklop ~]$ ls -lZ /etc/samba/ -rw-r--r-- root root system_u:object_r:samba_etc_t lmhosts -rw-r--r-- root root system_u:object_r:samba_etc_t smb.conf -rw------- root root user_u:object_r:samba_etc_t smbcredential-polsl [gajownik@cyklop ~]$ fstab: //dionizos/usr /srv/dionizos cifs credentials=/etc/samba/smbcredential-polsl,uid=gajownik,gid=users,file_mode=0666,dir _mode=0777 0 0 selinux-policy-targeted-2.4.6-42.fc6

Dnia 03/16/2007 02:18 PM, Użytkownik Paul Howarth napisał: > Looking at the policy sources, I think it may be working for me > because I have the allow_mount_anyfile boolean set You're right, changing this boolean to 'on' allowed to mount this network share on system boot. Is there any other way to resolve this problem? I would like not to relax to much SELinux policy.