Bug 448600
| Summary: | mounting gfs2 partitions causes avc | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Dave Jones <davej> |
| Component: | gfs2-utils | Assignee: | Steve Whitehouse <swhiteho> |
| Status: | CLOSED DUPLICATE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | low | Docs Contact: | |
| Priority: | low | ||
| Version: | rawhide | CC: | agk, cfeist, fdinitto, pfrields, swhiteho |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2008-05-28 10:21:15 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
grrr having the mount command able to load system modules is just wrong... Can't we just have the kernel realize there are gfs2 file systems around and load the module? If I allow this, this would allow all confined domains that need to mount stuff the ability to load kernel modules. Steve, What can we do to get these modules to auto load when we try to mount a gfs filesystem? (without doing it in mount.gfs2) The modules do autoload when we mount a gfs2 filesystem. The problem is that mount.gfs2 requires the lock_dlm module to be loaded _before_ we mount the filesystem. |
type=1400 audit(1211930671.516:7): avc: denied { sys_module } for pid=2818 comm="mount.gfs2" capability=16 scontext=system_u:system_r:mount_t:s0-s0:c0.c1023 tcontext=system_u:system_r:mount_t:s0-s0:c0.c1023 tclass=capability