Why can't I set /mnt/path to samba_share_t ?

Michael Cronenworth mike at cchtml.com
Mon Feb 15 21:54:27 UTC 2010


Shintaro Fujiwara wrote:
> Next, I commanded,
> # restorecon -R -v /mnt
> and /mnt/path became mnt_t.
> In that, I failed both read nor write.

restorecon looks at the global SELinux policy. Of course it would fail 
after running that command. :)

>
> I made local module by audit2allow and installed by semodule -i.
> Of course, I restoreconed.
> I failed again.
>
> I did
> # touch /.autorelabel
> # shutdown -r now
>
> I failed.
>
> security context of /mnt/path is still mnt_t.
>
> How can I set security context of /mnt/path to samba_share_t not using chcon ?
>

I guess we'll need to see what your local module looks like.


More information about the selinux mailing list