Hi,
Not sure if even this is were I should post so forgive the mis- posting. I did a search for selinux help and this is were I got.
I'm running RHEL 5 and am having SE linux issues even though I have SE Linux disabled.
I have basic support and they really are of no help on this matter.
My scenario;
RHEL 5 NFS server (although it can be a Centos NFS server or even a BlueArc). Centos 5 NFS client. Dump/Restore.
From my NFS client I do;
dump -f - / | restore -r -r -
I can get screen loads of stuff like;
restore: ./etc/ysyconfig/network-scripts/ifcfg-eth0: EA set security.selinux:system_u:object_r:etc_t:s0 failed: Operation not supported.
This happens on various files in various folders.
The dump/restore does complete and the files do get restored.
lsattr shows nothing set on the source files and when doing it on the NFS share, I get;
lsattr: Inappropriate ioctl for device While reading flags on .... (this is various dirs).
Any clues are appreciated.
Thanks in advance, - Brian
On 07/07/2009 04:10 PM, Brian Krusic wrote:
Hi,
Not sure if even this is were I should post so forgive the mis-posting. I did a search for selinux help and this is were I got.
I'm running RHEL 5 and am having SE linux issues even though I have SE Linux disabled.
I have basic support and they really are of no help on this matter.
My scenario;
RHEL 5 NFS server (although it can be a Centos NFS server or even a BlueArc). Centos 5 NFS client. Dump/Restore.
From my NFS client I do;
dump -f - / | restore -r -r -
I can get screen loads of stuff like;
restore: ./etc/ysyconfig/network-scripts/ifcfg-eth0: EA set security.selinux:system_u:object_r:etc_t:s0 failed: Operation not supported.
This happens on various files in various folders.
The dump/restore does complete and the files do get restored.
lsattr shows nothing set on the source files and when doing it on the NFS share, I get;
lsattr: Inappropriate ioctl for device While reading flags on .... (this is various dirs).
Any clues are appreciated.
Thanks in advance,
- Brian
-- fedora-selinux-list mailing list fedora-selinux-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-selinux-list
Looks like restore is trying to maintain the xattrs of a previous selinux label, when the kernel sees the xattr it refuses to assign it on an NFS share since NFS does not support xattrs.
On Jul 7, 2009, at 2:32 PM, Daniel J Walsh wrote:
On 07/07/2009 04:10 PM, Brian Krusic wrote:
Hi,
Not sure if even this is were I should post so forgive the mis- posting. I did a search for selinux help and this is were I got.
I'm running RHEL 5 and am having SE linux issues even though I have SE Linux disabled.
I have basic support and they really are of no help on this matter.
My scenario;
RHEL 5 NFS server (although it can be a Centos NFS server or even a BlueArc). Centos 5 NFS client. Dump/Restore.
From my NFS client I do;
dump -f - / | restore -r -r -
I can get screen loads of stuff like;
restore: ./etc/ysyconfig/network-scripts/ifcfg-eth0: EA set security.selinux:system_u:object_r:etc_t:s0 failed: Operation not supported.
This happens on various files in various folders.
The dump/restore does complete and the files do get restored.
lsattr shows nothing set on the source files and when doing it on the NFS share, I get;
lsattr: Inappropriate ioctl for device While reading flags on .... (this is various dirs).
Any clues are appreciated.
Thanks in advance,
- Brian
-- fedora-selinux-list mailing list fedora-selinux-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-selinux-list
Looks like restore is trying to maintain the xattrs of a previous selinux label, when the kernel sees the xattr it refuses to assign it on an NFS share since NFS does not support xattrs.
Hi Daniel,
A few things;
1 - When doing an lsxattr, I don't see any thing other then ------------ which tells me that no extended attributes exist for that file.
2 - How do I remove any selinux lables since I don't use or need selinux?
On 07/07/2009 05:38 PM, Brian Krusic wrote:
On Jul 7, 2009, at 2:32 PM, Daniel J Walsh wrote:
On 07/07/2009 04:10 PM, Brian Krusic wrote:
Hi,
Not sure if even this is were I should post so forgive the mis-posting. I did a search for selinux help and this is were I got.
I'm running RHEL 5 and am having SE linux issues even though I have SE Linux disabled.
I have basic support and they really are of no help on this matter.
My scenario;
RHEL 5 NFS server (although it can be a Centos NFS server or even a BlueArc). Centos 5 NFS client. Dump/Restore.
From my NFS client I do;
dump -f - / | restore -r -r -
I can get screen loads of stuff like;
restore: ./etc/ysyconfig/network-scripts/ifcfg-eth0: EA set security.selinux:system_u:object_r:etc_t:s0 failed: Operation not supported.
This happens on various files in various folders.
The dump/restore does complete and the files do get restored.
lsattr shows nothing set on the source files and when doing it on the NFS share, I get;
lsattr: Inappropriate ioctl for device While reading flags on .... (this is various dirs).
Any clues are appreciated.
Thanks in advance,
- Brian
-- fedora-selinux-list mailing list fedora-selinux-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-selinux-list
Looks like restore is trying to maintain the xattrs of a previous selinux label, when the kernel sees the xattr it refuses to assign it on an NFS share since NFS does not support xattrs.
Hi Daniel,
A few things;
1 - When doing an lsxattr, I don't see any thing other then ------------ which tells me that no extended attributes exist for that file.
2 - How do I remove any selinux lables since I don't use or need selinux?
I am not sure there is a good way to remove them, or if it is worth it.
Try
getfattr -n security.selinux /etc
To see if you have labeled.
I guess you could try
setfattr -x security.selinux /etc
To remove.
selinux@lists.fedoraproject.org