Re: Selinux disallows read-only loop mount of a file, but only at boot [SOLVED]

2009-05-07 Thread David
For an alternative solution for the possible benefit of other readers with similar issues, http://www.city-fan.org/tips/SubsetRepositoriesFedora10 is a guide to creating and using a base repository based on an ISO image of the DVD (distribution media), which contains relevant information and is

Re: Selinux disallows read-only loop mount of a file, but only at boot [SOLVED]

2009-05-06 Thread Daniel J Walsh
On 05/05/2009 08:17 PM, David wrote: On Wed, May 6, 2009 at 8:58 AM, Eamon Walshewa...@tycho.nsa.gov wrote: David wrote: I'm attempting to mount a loop device (a ro file) at boot using fstab. My fstab entry works fine from the command line, but it fails at boot time due to a selinux avc

Re: Selinux disallows read-only loop mount of a file, but only at boot [SOLVED]

2009-05-06 Thread dexter
2009/5/5 Alan Cox a...@lxorguk.ukuu.org.uk: On Tue, 5 May 2009 10:39:19 -0700 Paul j...@entel.ca wrote: Here is your problem right here: SELinux Have a good, slow read of this: http://kerneltrap.org/OpenBSD/SELinux_vs_OpenBSDs_Default_Security Why ? Because he thinks its *crap* Why not

Re: Selinux disallows read-only loop mount of a file, but only at boot [SOLVED]

2009-05-06 Thread Alan Cox
Have a good, slow read of this: http://kerneltrap.org/OpenBSD/SELinux_vs_OpenBSDs_Default_Security Why ? Because he thinks its *crap* I take it you also use talk radio as your encyclopedia 8) I think SELinux is not crap but Gnome is complete pants, but that isn't actually useful

Re: Selinux disallows read-only loop mount of a file, but only at boot [SOLVED]

2009-05-06 Thread dexter
2009/5/6 Alan Cox a...@lxorguk.ukuu.org.uk: Have a good, slow read of this: http://kerneltrap.org/OpenBSD/SELinux_vs_OpenBSDs_Default_Security Why ? Because he thinks its *crap* I take it you also use talk radio as your encyclopedia 8) I think SELinux is not crap but Gnome is complete

Re: Selinux disallows read-only loop mount of a file, but only at boot [SOLVED]

2009-05-06 Thread Alan Cox
But it really isn't the magic bullet y'all like to spout it is e.g it doesn't do kernel exploits, buffer overflows or prevent the last redhat/fedora intrusion It helps a lot in some of those cases. I run several web servers and because the scripts are all labelled properly SELinux has

Re: Selinux disallows read-only loop mount of a file, but only at boot [SOLVED]

2009-05-05 Thread David
I'm attempting to mount a loop device (a ro file) at boot using fstab. My fstab entry works fine from the command line, but it fails at boot time due to a selinux avc error. I assume this is due to incorrect file context. The file is under a nonstandard top level directory, so I need to

RE: Selinux disallows read-only loop mount of a file, but only at boot [SOLVED]

2009-05-05 Thread Paul
Here is your problem right here: SELinux Have a good, slow read of this: http://kerneltrap.org/OpenBSD/SELinux_vs_OpenBSDs_Default_Security If you still want to use SELinux, well, there's not much I can do to help you. Cheers, - Paul -Original Message- From:

Re: Selinux disallows read-only loop mount of a file, but only at boot [SOLVED]

2009-05-05 Thread Alan Cox
On Tue, 5 May 2009 10:39:19 -0700 Paul j...@entel.ca wrote: Here is your problem right here: SELinux Have a good, slow read of this: http://kerneltrap.org/OpenBSD/SELinux_vs_OpenBSDs_Default_Security Why ? Why not point him at some useful technical content on the subject instead of a

Re: Selinux disallows read-only loop mount of a file, but only at boot [SOLVED]

2009-05-05 Thread Eamon Walsh
David wrote: I'm attempting to mount a loop device (a ro file) at boot using fstab. My fstab entry works fine from the command line, but it fails at boot time due to a selinux avc error. I assume this is due to incorrect file context. The file is under a nonstandard top level directory, so I

Re: Selinux disallows read-only loop mount of a file, but only at boot [SOLVED]

2009-05-05 Thread David
On Wed, May 6, 2009 at 8:58 AM, Eamon Walsh ewa...@tycho.nsa.gov wrote: David wrote: I'm attempting to mount a loop device (a ro file) at boot using fstab. My fstab entry works fine from the command line, but it fails at boot time due to a selinux avc error. I assume this is due to incorrect

Re: Selinux disallows read-only loop mount of a file, but only at boot [SOLVED]

2009-05-04 Thread David
[da...@kablamm ~]$ cat /etc/selinux/targeted/contexts/files/file_contexts | grep mount /etc/rc.d/init.d/autofs -- system_u:object_r:automount_script_exec_t:s0 /bin/mount.*-- system_u:object_r:mount_exec_t:s0 /bin/umount.* -- system_u:object_r:mount_exec_t:s0 /sbin/mount.* --

Re: Selinux disallows read-only loop mount of a file, but only at boot [SOLVED]

2009-05-04 Thread Daniel J Walsh
On 05/04/2009 05:19 AM, David wrote: [da...@kablamm ~]$ cat /etc/selinux/targeted/contexts/files/file_contexts | grep mount /etc/rc.d/init.d/autofs -- system_u:object_r:automount_script_exec_t:s0 /bin/mount.*-- system_u:object_r:mount_exec_t:s0 /bin/umount.* --

Re: Selinux disallows read-only loop mount of a file, but only at boot [SOLVED]

2009-05-04 Thread David
On Tue, May 5, 2009 at 1:20 AM, Daniel J Walsh dwa...@redhat.com wrote: What OS Are you running? What policy version? Hi Daniel Thanks for responding. Just in case you didnt notice the beginning of this thread is http://article.gmane.org/gmane.linux.redhat.fedora.general/337584 where I stated