Le Thursday, November 3, 2016 12:42:27 PM CET Bill shirley a écrit :

> I'm getting an AVC in the boot process when systemd tries to mount a drive.

> It's too early in the boot process for it to be in

> /var/log/audit/audit.log. I don't speak AVC well enough to generate a

> rule without the log entry: Nov 03 10:31:05 c3po.example.com audit[1]: AVC

> avc: denied { read } for pid=1 comm="systemd" name="lan" dev="dm-0"

> ino=100732081 scontext=system_u:system_r:init_t:s0

> tcontext=system_u:object_r:samba_share_t:s0 tclass=dir permissive=0

>

> [0:root@c3po shorewall 2]$ ls -ldZ /lan

> drwxr-xr-x. 4 root root system_u:object_r:samba_share_t:s0 37 Jan 15 2011

> /lan

 

Why has that directory the file context `system_u:object_r:samba_share_t:s0`?

 

I think you should change it to `system_u:object_r:mnt_t:s0` (similar to the default context of the /mnt directory).

 

--

Laurent Rineau

http://fedoraproject.org/wiki/LaurentRineau