Description of problem:
When a system where VDSM was previously installed without selinux on not all VDSM related files are modified to correct context upon relabeling
Version-Release number of selected component (if applicable):
Steps to Reproduce:
our policy only covers
/rhev directory system_u:object_r:mnt_t:s0
/rhev(/[^/]*)? directory system_u:object_r:mnt_t:s0
this means that files are only covered this far /rhev/datacenter/*/
we need to add /rhev/datacenter/*/blockSD and the rest of the tree
The fix is that everything under /rhev/* should get the mnt_t context.
(In reply to comment #7)
> The fix is that everything under /rhev/* should get the mnt_t context.
everything under /rhev/* *recursively* should get the mnt_t context.
Yes, labels are not changed because of
which says labels won't be changed.
If you mount it with enabled SELinux it will work correct.
Otherwise you can re-mount /rhev or use
chcon -R -t mnt_t /rhev