Bug 447314 - df shows /root/.gvfs permission denied
Summary: df shows /root/.gvfs permission denied
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: gvfs
Version: 9
Hardware: All
OS: Linux
low
medium
Target Milestone: ---
Assignee: Tomáš Bžatek
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
: 479816 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2008-05-19 13:48 UTC by Brian Long
Modified: 2018-12-03 16:59 UTC (History)
11 users (show)

Fixed In Version: gvfs-0.2.4-1.fc9
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2009-06-23 09:04:47 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
GNOME Bugzilla 531516 0 Normal RESOLVED gvfs fuse mount is not functional after logout and subsequent login 2020-06-10 14:38:35 UTC

Description Brian Long 2008-05-19 13:48:37 UTC
Description of problem:
As an end user, if I run "df", I see the following:
df: `/root/.gvfs': Permission denied
If I run df as root, I see the following:
df: `/root/.gvfs': Transport endpoint is not connected

I am not logged in as root, but I did login to GNOME as root once.  Since then,
the above appears.  This may not be a coreutils issue, but a gvfs one.

Version-Release number of selected component (if applicable):
coreutils-6.10-22.fc9.i386

How reproducible:
Always

Steps to Reproduce:
1. Login to GNOME as root
2. Logout and login to GNOME as end-user
3. run df
  
Actual results:
df: `/root/.gvfs': Permission denied

Expected results:

Comment 1 Brian Long 2008-05-19 13:49:54 UTC
An ls -al /root | grep gvfs shows the following:

ls: cannot access /root/.gvfs: Transport endpoint is not connected
d?????????  ? ?    ?        ?                ? .gvfs


Comment 2 Jerry James 2008-05-19 18:36:35 UTC
I mounted a CIFS volume as root.  Now all of my users see both the
"/home/[username]/.gvfs: Transport endpoint is not connected" and the
"/root/.gvfs: Permission denied" messages when they run df.  Unmounting the
volume doesn't make the warnings stop.

FWIW, my root account doesn't show any warning messages from df.  It does show a
line beginning with "gvfs-fuse-daemon", though.

Also, the mounted volume icon that used to show up on my users' desktops with
F-8 doesn't show up with F-9.  The volume is mounted and readable by the users
from the command line.  Is that another manifestation of the same bug or
something different?


Comment 3 Jerry James 2008-05-19 19:13:39 UTC
Here's a transcript from a user after the CIFS volume was mounted (by root).

$ /sbin/restorecon -r -v .
/sbin/restorecon:  error while labeling .:  Transport endpoint is not connected
$ rm -fr .gvfs
rm: cannot remove '.gvfs': Transport endpoint is not connected

This appears to be a gvfs bug, not a coreutils bug.  I'm on an x86_64 box. 
Brian, what's your platform?


Comment 4 Jerry James 2008-05-19 19:23:38 UTC
One more piece of information.  Doing a restorecon inside /root shows this:

[root@localhost -]# /sbin/restorecon -r -v .
/sbin/restorecon reset ./.gvfs context
system_u:object_r:fusefs_t:s0->system_u:object_r:admin_home_t:s0
/sbin/restorecon set context ./.gvfs->system_u:object_r:admin_home_t:s0
failed:'Operation not supported'

So that reset looks wrong, in the first place, and even trying it brings
restorecon to a halt.  At the very least, it looks like gvfs information needs
to be added to the default SELinux policy.  That's probably a separate issue
from the original bug, but I thought I'd mention it just in case.

Comment 5 Ondrej Vasik 2008-05-22 11:28:12 UTC
Thanks for report, reassigning to gvfs (other distributions have similar reports
assigned to it e.g. http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476280 ,
https://bugs.launchpad.net/ubuntu/+source/gvfs/+bug/212789) . Issue with
restorecon should probably be reported to policycoreutils separately.

Comment 6 Matthias Clasen 2008-05-23 03:17:10 UTC
Note a gvfs issue. This is the way fuse handles permissions on its mounts.

Comment 7 pigetak178 2008-05-31 18:03:11 UTC
I unmounted these:

gvfs-fuse-daemon on /home/dmobrien/.gvfs type fuse.gvfs-fuse-daemon
(rw,nosuid,nodev,user=dmobrien)
gvfs-fuse-daemon on /root/.gvfs type fuse.gvfs-fuse-daemon (rw,nosuid,nodev)

and the error went away.

Fuse should play well with others and not do this crap.

Comment 8 Jonathan Underwood 2008-06-06 00:00:34 UTC
I see this problem too. It has been reported upstream and fixed, a patch is
available - please see:

http://bugzilla.gnome.org/show_bug.cgi?id=531516

It would be nice to have this patch added to the fedora package.

Comment 9 Tomáš Bžatek 2008-06-06 14:48:09 UTC
The "Permission denied" error messages are by design due to FUSE security
restrictions and it's conceptually difficult to avoid them.

The issue with persistent fuse mounts after logout should be fixed in upstream
and included in updated gvfs-0.2.4-1 package.

Comment 10 Fedora Update System 2008-06-06 14:49:39 UTC
gvfs-0.2.4-1.fc9 has been submitted as an update for Fedora 9

Comment 11 Fedora Update System 2008-06-10 03:13:52 UTC
gvfs-0.2.4-1.fc9 has been pushed to the Fedora 9 testing repository.  If problems still persist, please make note of it in this bug report.
 If you want to test the update, you can install it with 
 su -c 'yum --enablerepo=updates-testing update gvfs'.  You can provide feedback for this update here: http://admin.fedoraproject.org/updates/F9/FEDORA-2008-5124

Comment 12 Bug Zapper 2009-06-10 01:00:27 UTC
This message is a reminder that Fedora 9 is nearing its end of life.
Approximately 30 (thirty) days from now Fedora will stop maintaining
and issuing updates for Fedora 9.  It is Fedora's policy to close all
bug reports from releases that are no longer maintained.  At that time
this bug will be closed as WONTFIX if it remains open with a Fedora 
'version' of '9'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, simply change the 'version' 
to a later Fedora version prior to Fedora 9's end of life.

Bug Reporter: Thank you for reporting this issue and we are sorry that 
we may not be able to fix it before Fedora 9 is end of life.  If you 
would still like to see this bug fixed and are able to reproduce it 
against a later version of Fedora please change the 'version' of this 
bug to the applicable version.  If you are unable to change the version, 
please add a comment here and someone will do it for you.

Although we aim to fix as many bugs as possible during every release's 
lifetime, sometimes those efforts are overtaken by events.  Often a 
more recent Fedora release includes newer upstream software that fixes 
bugs or makes them obsolete.

The process we are following is described here: 
http://fedoraproject.org/wiki/BugZappers/HouseKeeping

Comment 13 Tomáš Bžatek 2009-06-23 09:07:13 UTC
*** Bug 479816 has been marked as a duplicate of this bug. ***

Comment 14 Kurt Seifried 2010-02-12 10:07:28 UTC
This bug still occurs in Fedora 12. Logged in as root, du -sh in a user directory:

du: cannot access `.gvfs': Permission denied

Comment 15 Andrew Haveland-Robinson 2010-07-05 10:04:21 UTC
This silly bug is still not fixed, it occurs in Fedora 13 too.

I rarely use X, but when running vncserver the results of munin's df plugin disappear.

/var/log/munin/munin-node.log :
2010/07/05-03:30:04 [27446] Error output from df_inode:
2010/07/05-03:30:04 [27446]     df: `/home/andy/.gvfs': Permission denied
2010/07/05-03:30:04 [27446]     Error executing df. Exit code 256

When I stop vncserver, the df results appear again, with gaps.

The presence of an empty .gvfs file should NOT affect the output of df!

Seems I have to choose between vncserver or munin disk usage stats, or stop vnc before */5!

Comment 16 Tomáš Bžatek 2010-07-19 15:27:16 UTC
(In reply to comment #15)
> This silly bug is still not fixed, it occurs in Fedora 13 too.
> 
> I rarely use X, but when running vncserver the results of munin's df plugin
> disappear.
> 
> /var/log/munin/munin-node.log :
> 2010/07/05-03:30:04 [27446] Error output from df_inode:
> 2010/07/05-03:30:04 [27446]     df: `/home/andy/.gvfs': Permission denied
> 2010/07/05-03:30:04 [27446]     Error executing df. Exit code 256
> 
> When I stop vncserver, the df results appear again, with gaps.
> 
> The presence of an empty .gvfs file should NOT affect the output of df!
> 
> Seems I have to choose between vncserver or munin disk usage stats, or stop vnc
> before */5!    
Please see comment 8 and comment 9. Applications should handle inaccessible mounts gracefully. This is not a problem of gvfs.

Also, the ~/.gvfs directory is a mountpoint, even if it appears empty, there might be other processes binded to it.


Note You need to log in before you can comment on or make changes to this bug.