SELinux blocking automounted home

John.Florian at dart.biz John.Florian at dart.biz
Thu Aug 16 17:49:24 UTC 2012


My $HOME is (normally) mounted with autofs via NFS, but with F18 I am 
seeing this in my audit.log:

type=AVC msg=audit(1345138563.576:2652): avc:  denied  { block_suspend } 
for  pid=3708 comm="sssd_nss" capability=36 
scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 
tclass=capability2

I briefly looked for new SE bools with:

# getsebool -a  | egrep 'sssd|nss'
authlogin_nsswitch_use_ldap --> off

That one didn't quite sound right, but I toggled it anyway, but still no 
luck.  To verify basic setup, I 'setenforce 0' and tried ssh again to see 
if $HOME would be mounted this time.  Still no luck, so as root, I 
manually tried the mount under /tmp and that did work, but also generated:

type=AVC msg=audit(1345139104.567:2687): avc:  denied  { block_suspend } 
for  pid=4084 comm="rpc.idmapd" capability=36 
scontext=system_u:system_r:rpcd_t:s0 tcontext=system_u:system_r:rpcd_t:s0 
tclass=capability2

Known problems or am I overlooking something?

--
John Florian
Machine Data Collections Team
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/test/attachments/20120816/b5a478bc/attachment.html>


More information about the test mailing list