mount point labels

[Clarkson, Mike R (US SSA)]

The kernel version is 2.6.18-8.1.1.el5, and the version of nfs-utils is
1:1.0.9-16.el5.

I do already have the same file system automounted elsewhere. Is that
causing the problem?

By the way, can mount point labels be applied to automounted file
systems? If so, how would I do that? Would I put the label into the
automount file (auto.*) in the /etc directory?

-----Original Message-----
From: Stephen Smalley [mailto:sds at tycho.nsa.gov] 
Sent: Tuesday, May 01, 2007 7:30 AM
To: Clarkson, Mike R (US SSA)
Cc: fedora-selinux-list at redhat.com; Daniel J Walsh; Eric Paris
Subject: Re: mount point labels

On Mon, 2007-04-30 at 17:37 -0700, Clarkson, Mike R (US SSA) wrote:
> I'm attempting to create the labeled mount point with the following
> command:
> 
>             mount -t nfs -o context=system_u:object_r:import_file_t:s0
> nas:/vol/home /home/SimulatedImport/output/home
> 
>  
> 
> The mount point is created without any errors, but the label that I
> specify in the mount command is not used. Instead of
> system_u:object_r:import_file_t, the context of
> the /home/SimulatedImport/output/home is system_u:object_r:nfs_t:s0.
> 
>             ls -dZ /home/SimulatedImport/output/home
> 
>             drwxr-xr-x  root root
> system_u:object_r:nfs_t:s0
/home/m252/SimulatedImport/output/home
> 
>  
> 
> I'm running RHEL5 with a policy built as mls off of the targeted
> policy.
> 
>  
> 
> Does anyone know why the context label is not taking?

Do you already have the same filesystem mounted elsewhere?
What versions of kernel and nfs-utils do you have?

-- 
Stephen Smalley
National Security Agency