Hi List, I'm trying to get a SLES11 guest to mount an NFS share from a z/OS NFS server.
All appears to work with the mount, i.e. it proceeds without obvious error, but when I try to change to the mounted directory I get "permission denied", even when I'm root which I was quite surprised by. I've checked seemingly obvious places and can't see what I'm sure is a simple error: /var/log/messages, /var/log/firewall, /var/log/warn /var/log/xinetd.log all show nothing relevant. The only thing I found which looks at all relevant is this from the /var/log/audit/audit.log file: type=APPARMOR_DENIED msg=audit(1271311031.300:8010): operation="file_mmap" requested_mask="mr::" denied_mask="m::" fsuid=0 name="/etc/passwd" pid=1680 parent=1 profile="/usr/sbin/nscd" When I googled for 'profile="/usr/sbin/nscd"' I found something that I'm not sure is relevant, relating to an old AppArmor bug from 2008 (https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/144383). I've got a problem open with IBM assuming it was a server bug, but they're pretty sure from the CTRACE I did for them that the server is fine and it's at the client end. My mvslogin command fails - I'm guessing a firewall issue but before I go and hassle the comms team (with all the overhead of that) I thought I'd make sure the NFS request was actually leaving the client OK, hence the question about the AppArmor thing (I'm not sure what that is). It made no difference when I disabled AppArmor anyway, so I'm guessing it's a firewall thing. There were 5 additional lines like the logged one above added after I did an mvslogin with AppArmor going and none added when it was disabled - both times the permissions were still denied when I tried to access the share. Thanks for any light anyone can shed...I suppose firewalls would routinely block NFS traffic unless it were specifically requested beforehand. Best regards Peter Peter Bishop HP Enterprise Services APJ Mainframe Portfolio & Engineering +61 2 9012 5147 office | +61 2 9012 6620 fax | [email protected]<mailto:[email protected]> 36-46 George St | Burwood | NSW 2134 Australia ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
