"avc denied" on mounted ISO image for HTTP install

[Matt Arnilo S. Baluyos (Mailing Lists)]

Hello everyone,

I'm trying to do a network installation via HTTP install. To save
space on my HTTP server, I mounted my ISO images into a
publicly-accessible directory under my DocumentRoot.

mount -o loop /backup/iso/centos-4.1/CentOS-4.1-i386-bin1of4.iso
/var/www/html/centos-4.1/disc1
mount -o loop /backup/iso/centos-4.1/CentOS-4.1-i386-bin2of4.iso
/var/www/html/centos-4.1/disc2
mount -o loop /backup/iso/centos-4.1/CentOS-4.1-i386-bin3of4.iso
/var/www/html/centos-4.1/disc3
mount -o loop /backup/iso/centos-4.1/CentOS-4.1-i386-bin4of4.iso
/var/www/html/centos-4.1/disc4

Trying to test the installation on a client machine, I gett a "403
Forbidden" error whenever I browse http://server/centos-4.1/disc1

So I check my /var/log/messages and I found these SELinux error logs:

Sep 25 07:47:46 localhost kernel: audit(1127605666.816:0): avc: 
denied  { getattr } for  pid=2638 comm=httpd
path=/var/www/html/centos-4.1/disc1 dev=loop0 ino=1856
scontext=user_u:system_r:httpd_t tcontext=system_u:object_r:iso9660_t
tclass=dir

Any ideas on how to solve this? I am admittedly a SELinux newbie.

Best regards,
Matt

--
Stand before it and there is no beginning.
Follow it and there is no end.
Stay with the ancient Tao,
Move with the present.

[Ian Pilcher]

Matt Arnilo S. Baluyos (Mailing Lists) wrote:
> Sep 25 07:47:46 localhost kernel: audit(1127605666.816:0): avc: 
> denied  { getattr } for  pid=2638 comm=httpd
> path=/var/www/html/centos-4.1/disc1 dev=loop0 ino=1856
> scontext=user_u:system_r:httpd_t tcontext=system_u:object_r:iso9660_t
> tclass=dir

mount -o ro,loop,fscontext=system_u:object_r:httpd_sys_content_t ...