[redhat-lspp] Re: mount problems with latest refresh

[Stephen Smalley]

On Thu, 2006-12-14 at 09:49 -0200, Klaus Heinrich Kiwi wrote:
> Em Wed, 13 Dec 2006 18:17:02 -0500, Daniel J Walsh escreveu:
> 
> > Any avc messages?
>  
> None!
> 
> Only this error message (which also is echoed at the machine's console):
> 
> SELinux:
> security_context_to_sid("system_u:object_r:tmp_t:s0-s15:c0.c1023") failed
> for (dev hdc, type iso9660) errno=-22
> 
> (erro -22 = EINVAL iirc)
> 
> Any special audit rule that may help?

It isn't a permission denial, just an invalid context error from
security_context_to_sid().  If you try using the same context in e.g. a
chcon command, does it also report Invalid argument?  If so, then it is
a policy problem - the context is illegal under the policy, e.g. one of
the components isn't defined by the policy or the combination of them is
not authorized by the policy.

-- 
Stephen Smalley
National Security Agency