Bug 149028

Summary:	Should restorecon traverse NFS filesystems?
Product:	[Fedora] Fedora	Reporter:	Orion Poplawski <orion>
Component:	libselinux	Assignee:	Daniel Walsh <dwalsh>
Status:	CLOSED CURRENTRELEASE	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	3	CC:	sundaram
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	1.21.21-1	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2005-09-05 06:52:01 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Orion Poplawski 2005-02-18 00:04:20 UTC

Description of problem:

Did a yum update on the baseurl=ftp://people.redhat.com/dwalsh/SELinux/Fedora/
 repository.  Not sure exactly which package generated the restorecon output,
but I got a lot of:

/sbin/restorecon get context on /opt/local/udunits-1.11.7-pgf64/bin/udunits
failed: 'Operation not supported'
/sbin/restorecon get context on /opt/local/udunits-pgf64 failed: 'Operation not
supported'
/sbin/restorecon get context on /opt/local/xgks-pgf64 failed: 'Operation not
supported'

/opt/local is a NFS mounted directory.  Should restorecon really traverse NFS
directories?  Shouldn't the host system be responsible.


end of yum output:

Completing update for libselinux  - 9/15
Completing update for policycoreutils  - 10/15
Completing update for checkpolicy  - 11/15
Completing update for selinux-policy-targeted  - 12/15
Completing update for libsepol  - 13/15
Completing update for yum  - 14/15
Completing update for selinux-policy-targeted-sources  - 15/15

Installed: kernel-smp.i686 0:2.6.10-1.766_FC3
Updated: checkpolicy.i386 0:1.21.4-1 libselinux.i386 0:1.21.10-1 libsepol.i386
0:1.3.5-1 policycoreutils.i386 0:1.21.17-1 selinux-policy-targeted.noarch
0:1.21.14-1 selinux-policy-targeted-sources.noarch 0:1.21.14-1 yum.noarch
0:2.1.13-1.cora.1
Complete!

Version-Release number of selected component (if applicable):


How reproducible:
Haven't tried to reproduce

Steps to Reproduce:
1.
2.
3.
  
Actual results:


Expected results:


Additional info:

Comment 1 Daniel Walsh 2005-03-08 19:29:52 UTC

Latest policycoreutils uses find to eliminate nfs traversal and pipes
output to restorecon. 

policycoreutils-1.21.21-1

Comment 2 Orion Poplawski 2005-03-10 21:27:55 UTC

I'm running with policycoreutils-1.21.22-2 now.  I'll let you know if
I see this again.  I've see some restorecon output since without
seeing any NFS directories, but not sure if that proves this is fixed.