Re: [gentoo-hardened] SELinux and NFS

Sorry if I was unclear, I was a little bit tired.

For some reason mountd seems to wants to access a /dev/-node and I can't
really understand why.
I think it would help a little bit if we knew somewhat more about your
share. What is your options in export? Do you have anything mounted
beneath '/data' and is everything labeled correctly?

When I said "where NFS are supposed to read them" I meant a place with the
right security context. For me I have it as a subdir to /srv/ which is by
default "system_u:object_r:public_content_t", something NFS are allowed to
read according to its policy. So this was kind of my way to say "labeled
correctly".

And for reference on server:
/etc/exports:
/srv/ftp 192.168.0.0/255.255.255.0(rw,no_subtree_check,async)

on client:
/etc/fstab
192.168.0.1:/srv/ftp /home/shared   nfs   tcp,intr,hard,rsize=8192,wsize=8192


>
> On Sun, 2008-02-24 at 22:30 +0100, xake@×××××××××.net wrote:
>> Why do you want mountd to tuch /dev/sdb1 to start with? I thing you
>> have a
>> missconfiguration somewhere...
>
> /dev/sdb1 is the partition that it's supposed to share. I never had a
> problem with the NFS config other than with SELinux now.
>
>> For me most/all NFS denials went away when I restructured the folder
>> placments on my system to acctually follow "the standard" (i.e. place
>> stuff where NFS are supposed to read/write to them) and configure NFS
>> thereafter.
>
> All I did to configure was tell it to share /data (sdb1) on the local
> LAN in /etc/exports and started the nfs services.
>
> What do you mean standard place to put stuff? Is there any docs
> available on the proper way to configure NFS? I found some stuff in the
> forums but it just ended up pointing to
> http://gentoo-wiki.com/HOWTO_Share_Directories_via_NFS.
>
> --
> Loren Bandiera <lorenb@××××××××××××××.com>
> LB Technology Services, Inc.
>
>
> --
> gentoo-hardened@l.g.o mailing list
>
>


-- 
gentoo-hardened@l.g.o mailing list