hi,
i am running zod.i have some ntfs and vfat partitions as well.After configuring yum,i installed ntfs-3g driver for write support.i have selinux in the enforcing mode, i dont want to switch it off instead do the correct trouble shooting.
When the system boots .it gives me the error of permission denied to mount ntfs drives.After getting into the system , if i gave mount -a as root,they are mounted.I run setroubleshot ,it show me the error on readahead application.
when i shutdown, the same problem unable to umount and showing me lot of selinux errors.
Plz help me in giving the correct context.
regards,
Tom.

Post your AVC messages instead of talking about them.

hi,
audit(1168275693.237:4): avc: denied { execute_no_trans } for pid=1717 comm="mount.ntfs-3g" name="fusermount" dev=dm-11 ino=586010 scontext=system_u:system_r:mount_t:s0 tcontext=system_ubject_r:mount_exec_t:s0 tclass=file

found in /var/log/dmesg

thanks

regards,
Tom.

See http://www.ntfs-3g.org/support.html#selinux

hi,
they FAQ page you referenced me,asked me to update the packages and i do the same
[root@server ~]# rpm -qa | grep selinux
libselinux-devel-1.30.29-2
libselinux-1.30.29-2
selinux-policy-targeted-2.4.6-23.fc6
selinux-policy-2.4.6-23.fc6
libselinux-python-1.30.29-2

i also tried,

[root@server ~]# audit2allow -M local < /var/log/dmesg
Generating type enforcment file: local.te
Compiling policy
checkmodule -M -m -o local.mod local.te
semodule_package -o local.pp -m local.mod

******************** IMPORTANT ***********************

In order to load this newly created policy package into the kernel,
you are required to execute

semodule -i local.pp

[root@server ~]#

but they error is still shown and is in /var/log/dmesg as,


audit(1168371646.228:4): avc: denied { read write } for pid=1717 comm="fusermount" name="fuse" dev=tmpfs ino=1859 scontext=system_u:system_r:mount_t:s0 tcontext=system_ubject_r:fixed_disk_device_t:s0 tclass=chr_file

thanks and regards,
Tom.

hi,
if i am write, i think the bug is not fully resolved,may some people got it.
In a try to resolve this problem i think i have misused the audit2allow command,by changing to wrong contexts for some files.Now i get more than 10 selinux errors some counts more than 100.Can u plz say me,how to reset the selinux to default on targeted policy.Thank u
regards,
Tom

As root 'touch /.autorelabel && /sbin/shutdown -r now'. Another way is to 'fixfiles relabel'. It completely relabels the system but is somewhat destructive (removes /tmp contents).

hi,
thanks a lot
regards,
Tom.