ncpfs selinux policy
Hi,
I am using Fedora Core 5 with SELinux enabled. This works fine and I can tune SELinux fine to suit my needs, but not so for ncpfs mounts. I happen to work in an organisation that uses Novell architecture, so I need to be able to mount a Novell network share, using the ncpfs tools. Now I am able to connect to the share, but after some idle time, it gets disconnected and won't reconnect. I went to ask another Linux user in the organization for help. However, a colleague of mine, who disabled SELinux on his machine, has no problems, while I am unable to connect to the shares after the described idle time... Unless I get SELinux in permissive mode, that is. Searching for policy information about how to permit ncpfs to be used, I get stuck.. Perhaps the context on the parent directory in which I want to mount the ncpfs mount is wrong? Or the selinux-policy-targeted is missing ncpfs directives ?? Anyway, I am unable to work properly, currently, with ncpfs shares. Does anyone have this same problem? Or is there someone who could point me in the right direction of solving this issue? Besides this, I tried to put the ncpfs mounting in autofs, trying to see if that would solve my problem, but it seems automount is completely unable to mount ncpfs shares at all... Any help would be appreciated on this.. Thanks. |
Are there any avc messages to work with here?
|
There are three configs in which I would want to mount the ncpfs share, being either:
- autofs, making automount mount the share when needed. This fails.. Accompanying config and messages: /etc/auto.master being: Code:
/server /etc/auto.server Code:
share -fstype=ncpfs,ipserver=server.example.com,user=roh.example.com,volume=USR,passwd=secret123,uid=roh SERVER Code:
type=AVC msg=audit(1161075106.947:232): avc: denied { mount } for pid=13652 comm="mount.ncpfs" name="/" dev=ncpfs ino=2 scontext=user_u:system_r:mount_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem - automatic (boot time) mount through /etc/fstab. This fails though, without messages in dmesg nor /var/log/messages, nor /var/log/audit/audit.log. The content of /etc/fstab being: Code:
SERVER /mnt/netmount ncpfs defaults,auto,user=roh.example.com,passwd=secret123,volume=USR,ipserver=server.example.com,uid=roh,gid=users 0 0 - possible mount as shown above by non-root user. Therefore I have set suid on /sbin/mount.ncpfs but it comes with Permission Denied, and no concrete evidence to why is found (nor messages, nor selinux audit) Thanks in advance. |
All times are GMT -5. The time now is 06:32 PM. |