LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 02-23-2005, 05:29 PM   #1
TomF
Member
 
Registered: Sep 2003
Location: California
Distribution: RH9, Fedora: FC1, FC3, Suse9.3
Posts: 54

Rep: Reputation: 15
NFS write access denied on one of two filesystems


I am running Fedora Core 3, with Selinux active but not completely configured, as an NFS server. In the past, I have successfully accessed several filesystems for read/write from my client. Today, I started getting "access denied" from one of the file systems, while writes continued to work on the other. The only configuration changes that I have made recently are related to installing a new monitor, and I have not touched the exports file.

I have several filesystems exported with
/ FrayneDesktop(ro,insecure,sync,no_root_squash)
/a/b/sata_bulk FrayneDesktop(rw,insecure,sync,no_root_squash)
/a/b/vg-maxtor-bulkdata FrayneDesktop(rw,insecure,sync,no_root_squash)
/a/b/as-hda3 FrayneDesktop(rw,insecure,sync,no_root_squash)
/a/b/as-hda5 FrayneDesktop(rw,insecure,sync,no_root_squash)
/a/b/as-hda5-boot FrayneDesktop(rw,insecure,sync,no_root_squash)
/a/b/as-hda7 FrayneDesktop(rw,insecure,sync,no_root_squash)
/a/b/hdaBulk-hda3 FrayneDesktop(rw,insecure,sync,no_root_squash)

I tried executing exportfs -ra on the server, restarting netfs on the client, and mounting the NFS filesystems. I got:

mount -l
...
asusPC:/a/b/sata_bulk on /a/as-sata_bulk type nfs (rw,noexec,nosuid,nodev,addr=192.168.1.100)
asusPC:/a/b/hdaBulk-hda3 on /a/as-hdaBulk-hda3 type nfs (rw,noexec,nosuid,nodev,addr=192.168.1.100)
[root@localhost root]# cd /a/as-hdaBulk-hda3
[root@localhost as-hdaBulk-hda3]# touch 050223test
touch: cannot touch `050223test': Permission denied
[root@localhost as-hdaBulk-hda3]# touch /a/as-sata_bulk/050223test
[root@localhost as-hdaBulk-hda3]#


I found no messages in /var/log.

Could this be problem with my Selinux configuration? Is there a way to get the error logged? Any other ideas for troubleshooting this problem?
 
Old 02-23-2005, 06:59 PM   #2
Capt_Caveman
Senior Member
 
Registered: Mar 2003
Distribution: Fedora
Posts: 3,658

Rep: Reputation: 69
Try temporarily disabling SELinux. There should be a tab in the Security Level menu that lets you disable policy enforcement.
 
Old 02-23-2005, 08:48 PM   #3
TomF
Member
 
Registered: Sep 2003
Location: California
Distribution: RH9, Fedora: FC1, FC3, Suse9.3
Posts: 54

Original Poster
Rep: Reputation: 15
Disabling Selinux bypasses the problem

Now I need to figure out to enable Selinux and fix the write access problem permanently.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Partition: write access denied linmix Linux - Software 7 10-08-2005 06:11 PM
Write access denied in Vi Hockeyfan Linux - Software 2 07-16-2005 11:03 PM
nfs access denied Motown Linux - Networking 1 07-14-2004 12:38 AM
NFS: how can I get write-access?? pablovschby Linux - Networking 3 12-24-2003 08:39 AM
NFS - access denied filsed Linux - Networking 2 03-21-2002 09:56 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 08:32 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration