I got the following AVC denial in the audit logs and I'm wondering what
would cause this:
type=AVC msg=audit(1232734163.528:997720):avc: denied { mount } for
pid=28016 comm="find" name="/" dev=0:1c ino=0
scontext=root:staff_r:libstart_t:s0-s4:c0.c255
tcontext=system_u:object_r:nfs_t:s0 tclass=filesystem
The program running in the libstart_t domain is using the "find" cmd,
and find is requiring the "mount" permission. Could this be caused by
"find" traversing into an automounted (NFS) directory? But in that case
I would expect the automount daemon, which is running in the automount_t
domain, to do the mounting.
Thanks
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.
