[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: mounting nfs as httpd_sys_content_t under selinux



Stephen Smalley wrote:
Just to clarify:  it isn't just that they are coming from the same
server but that they are coming from the same server with the same
filesystem id.

Since the remote NFS server is an appliance, I'm pretty sure I won't be able to mount a different filesystem on top or at a different mountpoint in order to prevent this.


On Mon, 2007-12-10 at 12:24 -0500, Eric Paris wrote:
You might get what you want with the nosharecache mount option i
mentioned, if adding that to both mounts doesn't help, yeah, you are
stuck, sorry.

I did add this option, but it's hard to tell right now whether it because we are also disallowing from httpd side. I'll have to wait for another downtime to test this.

Thanks to both of you for the assistance.

johnn


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]