On Wed, Feb 19, 2020 at 01:07:20PM -0500, J. Bruce Fields wrote: > On Wed, Feb 19, 2020 at 06:03:02PM +0000, Richard Haines wrote: > > I've been building selinux-testsuite tests for various filesystems and > > have come across an unlabeled issue when testing. Stephen thinks that > > this is a bug sometimes seen with labeled NFS, where the top-level > > mounted directory shows up with unlabeled_t initially, then later gets > > refreshed to a valid context. > > > > I've put together a test script, policy module and mount prog to > > facilitate debugging this issue. I've set out how I tested this on a > > Fedora 31 system below, if any problems let me know. > > Thanks! Adding the nfs group to the cc. > > I seem to recall a report of a similar bug in the Red Hat bugzilla, that > I spent a little time investigating and couldn't pin down. I'll see if > I can dig that up. This one: https://bugzilla.redhat.com/show_bug.cgi?id=1625955 It should be publicy visible. --b.