Hi, I am using selinux under Fedora 10 (2.6.27.37). I have Apache httpd running, and I would like it to be able to serve requests for files which are on a mounted NTFS volume. I have tried to mount the volume with an appropriate context: mount -o context=system_u:object_r:httpd_sys_content_t:s0 /dev/somedevice /mnt/somemountpoint But the resulting context on files within the mount is still: system_u:object_r:fusefs_t:s0 The mount itself doesn't generate any noteworthy warnings/errors in my logs. So of course seliux disallows apache to read the files and generates corresponding denials in my logs. No other partition on this device is already mounted. Is this a known bug? Others seem to have similar issues: http://old.nabble.com/mounting-nfs-as-httpd_sys_content_t-under-selinux-td14230083.html http://forums.fedoraforum.org/archive/index.php/t-246937.html http://old.nabble.com/SELinux-enforcing,-an-external-ntfs-3g-mount,-Samba-and-Fedora-8-td14356238.html I guess an alternative is to create a policy that tells selinux to allow httpd to read fuse files, as is described here: https://bugzilla.redhat.com/show_bug.cgi?id=631616#c2 Any ideas? Thanks -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux
