Re: Getting avc denied messages for mounting iso images on loopback device

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Srinivasa Ds wrote:
Hi all

I tried to mount an iso image on a loopback device in FC6,Iam getting this error.

 =======================

audit(1164321995.887:79): avc:  denied  { read } for  pid=2969
comm="pam_console_app" name="/" dev=loop0 ino=1472
scontext=system_u:system_r:pam_console_t:s0-s0:c0.c1023
tcontext=system_u:object_r:iso9660_t:s0 tclass=dir
audit(1164321995.887:80): avc:  denied  { read } for  pid=2966
comm="pam_console_app" name="/" dev=loop0 ino=1472
scontext=system_u:system_r:pam_console_t:s0-s0:c0.c1023
tcontext=system_u:object_r:iso9660_t:s0 tclass=dir

=======================================================

I was doing this operation through ssh.This works if selinux is disabled.
Is there any fix for this??

I'm not seeing this, but then I use a context mount option in /etc/fstab since I'm going to export the mounted ISOs using httpd:

/path/to/iso/my.iso /path/to/mountpoint iso9660 ro,loop,fscontext=system_u:object_r:public_content_t 0 0

Paul.

--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux