[DSE-User] file system relabeling pitfall with fixfiles on Xen domU

Philip phil at noggle.biz
Thu Sep 13 17:08:23 UTC 2007


Hey all,

I finally got around to setting up a few Debian domUs with SELinux and 
hit a snag I thought others might benefit from hearing about.  Commands 
like fixfiles and subsequently the .autorelabel functionality rely on 
the mount command to report the file system type.  If, like me, your Xen 
file systems are just one partition for / (lvm is great) then it will be 
mounted without needing an /etc/fstab entry.  This is great except that 
mount will then report the file system type as "rootfs" which causes 
fixfiles to fail silently.

This hung me up for a few hours till I figured out that I needed a quick 
little /etc/fstab entry like:

/dev/hda	/	ext3	defaults	0	2

fixfiles works fine now.

Does anyone have a preference where a note about this snag should be put 
on the wiki.debian.org/SELinux pages?  I'll plan to put it under the 
Pitfalls section of the Setup page if no one objects.

Cheers,
- Philip




More information about the Selinux-user mailing list