Re: Giving httpd access to a mounted NTFS volume

[Chris Lopes]

Great, thanks for the confirmation.
The audit2allow way works fine.


----- Original Message ----
From: Cristian Ciupitu <cristian.ciupitu(a)yahoo.com&gt;
To: selinux(a)lists.fedoraproject.org; Chris Lopes <clopes(a)yahoo.com&gt;
Sent: Thu, September 9, 2010 7:27:12 PM
Subject: Re: Giving httpd access to a mounted NTFS volume

>  From: Chris Lopes <clopes(a)yahoo.com&gt;
>  Subject: Giving httpd access to a mounted NTFS volume
>  To: selinux(a)lists.fedoraproject.org
>  Date: Thursday, September 9, 2010, 2:46 PM
>  Hi,
>  
>  I am using selinux under Fedora 10 (2.6.27.37).
>  I have Apache httpd running, and I would like it to be able
>  to serve requests 
>  for files which are on a mounted NTFS volume.
>  
>  I have tried to mount the volume with an appropriate
>  context:
>  mount -o context=system_u:object_r:httpd_sys_content_t:s0
>  /dev/somedevice 
>  /mnt/somemountpoint
>  
>  But the resulting context on files within the mount is 
>  still: system_u:object_r:fusefs_t:s0
>  The mount itself doesn't generate any noteworthy
>  warnings/errors in my logs.
>  So of course seliux disallows apache to read the files and
>  generates 
>  corresponding denials in my logs.
>  No other partition on this device is already mounted.
>  
>  Is this a known bug? 
https://bugzilla.redhat.com/show_bug.cgi?id=502946

Cheers,
Cristian