selinux and mounting a vfat partition

[James Morris]

On Fri, 2 Apr 2004, J. Scott Amort wrote:

> Hi All,
> 
> I can't seem to mount a vfat partition with selinux=enforcing, I get the
> error:
> 
> mount: block device /dev/hda9 is write-protected, mounting read-only
> mount: cannot mount block device /dev/hda9 read-only
> 
> I read through some of the archives, and my understanding is that there
> is no way for selinux to label the vfat files, so I need to use a
> context mount.  But, if I try:
> 
> mount -t vfat /dev/hda9 /home/music -o \
> context=user_u:sysadm_r:sysadm_t
> 
> it still doesn't work.  I've also tried:
> 
> context=root:sysadm_r:sysadm_t
> 
> but still no luck.  Any ideas or suggestions?  Thanks.

What avc messages are you seeing in syslog when this happens?


- James
-- 
James Morris
<jmorris at redhat.com>