Selinux enforced and ntfs-3g problem

CompiMan · 04-08-2009, 05:45 AM

Hi all Linux users!

I installed Debian 5 (Lenny) on my laptop and I have configured it and all was perfect. All what I want to do I could BUT a friend suggested to install selinux and now come troubles.

I use kernel version 2.6.26-1-686, all standard packages from Debian stable repository. I have installed selinux after description in this site: http://doc.coker.com.au/computers/in...inux-on-lenny/
My fstab look like:

Code:

# <file system> <mount point>  <type>     <options>       <dump>  <pass>
      proc      /proc         proc        defaults          0       0
  /dev/hda3     /             ext3    rrors=remount-ro      0       1
  /dev/hda4     none          swap           sw             0       0
  /dev/hdc      /media/cdrom0 udf,iso9660  user,noauto      0       0
  /dev/hda2     /mnt/programs ntfs-3g   defaults,auto,user  0       0
  /dev/hda1     /mnt/system   ntfs-3g defaults,auto,user,ro 0       0

Since I have installed SELinux I can't mount automatic at boot my ntfs partitioner. I specify that I use selinux in enforced mode. If it is in permissive or disable all is perfect again.

BUT when I use it enforced every time I boot my computer says something like:
- /etc/fuse can't be created (permission denied) please run "modprobe fuse" as root
- after come the error ntfs-3g failed to mount.

After the system start and I run the command "modprobe fuse" I can mount manually my HDDs, but my question is ....need to do all this work manual, there is nothing that can be done to do it automatic as it was without selinux?

Any suggestions or ideas are welcome.

Thanks,
FGC

******* · 04-08-2009, 10:37 AM

Quote:

Originally Posted by CompiMan

/etc/fuse can't be created (permission denied)

/etc would be an odd place to create the fuse device. Maybe you meant "/dev/fuse"? And how is fuse loaded? Is it listed in modprobe.conf? Else would adding the modprobe command to /etc/(rc.d/)rc.local help? Else please try to find modprobe-related or other errors Selinux errors in your syslog or audit log if you run the audit daemon. If these errors can't be corrected by other means then adding them to a local Selinux policy would be easy to do.

CompiMan · 04-08-2009, 02:46 PM

Hi !

YES it is right it was /dev/fuse and was a lot of permission denied when I checked my dmesg output.
Anyway I choose to reinstall all from the beginning without SELINUX of course and now everything is JUST FINE.
I will wait with selinux until better developed and MAYBE....but just MAYBE I will try it again... maybe just on my virtual machine....

Thanks for your help.
Cristian

******* · 04-16-2009, 10:11 AM

Quote:

Originally Posted by CompiMan

I will wait with selinux until better developed

So basically you're back to square one. Bummer. Selinux provides protection on top of things. Even though you might have had problems with it it isn't that hard to get used to (note your probs never got fixed so you can't experience how well it'll work). Most problems can be fixed. And by testing things you can help make Selinux better too.