From: Matthew Cengia <mattcen@cyber.com.au>
To: "J. R. Okajima" <hooanon05g@gmail.com>
Cc: linux-unionfs@vger.kernel.org
Subject: Re: Fwd: overlayfs+selinux error: OPNOTSUPP
Date: Tue, 22 Sep 2015 09:50:36 +1000 [thread overview]
Message-ID: <20150921235035.GK22582@cyber.com.au> (raw)
In-Reply-To: <19636.1442846044@jrobl>
[-- Attachment #1: Type: text/plain, Size: 1679 bytes --]
On 2015-09-21 23:34, J. R. Okajima wrote:
[...]
> (from the quoted post)
> ----------------------------------------------------------------------
> aufs doesn't support SELinux, so I had to switch to overlayfs.
> So now my target is Debian 8 / Linux 4.1 / systemd / overlayfs / SELinux.
> ----------------------------------------------------------------------
>
> I know aufs is not your main concern, but would you tell me why do you
> think that aufs doesn't support SELinux? If I remember correctly, aufs
> can live with SELinux. It might be due to your (or your distribution's)
> configuration, especially CONFIG_AUFS_XATTR.
If I recall correctly, there are two problems here. The main problem is
that we upgraded to Linux 4.1 to support newer hardware, and given that
has overlayfs in mainline, the Debian kernel maintainers, I believe,
completely removed support for aufs in the kernel, leaving us with
little choice unless we wanted to apply our own patches, which we'd very
much rather avoid.
The other problem seems to be that I can't find that CONFIG_AUFS_XATTR
option in the kernel config I'm using. It may be that the aufs version
I'm using doesn't support xattrs at all, but a newer version does. The
kernel that I just checked this on was
https://packages.debian.org/jessie/linux-image-3.16.0-4-amd64.
Additionally, I've not chased this up yet, but I've received a response
from the SELinux list indicating that the problem is related to me not
having the policy loaded yet:
http://thread.gmane.org/gmane.comp.security.selinux/23045/focus=23053. I
think this will be the next thing I investigate.
--
Regards,
Matthew Cengia
[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 966 bytes --]
prev parent reply other threads:[~2015-09-21 23:50 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2015-09-21 7:43 Fwd: overlayfs+selinux error: OPNOTSUPP Matthew Cengia
2015-09-21 14:34 ` J. R. Okajima
2015-09-21 23:50 ` Matthew Cengia [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20150921235035.GK22582@cyber.com.au \
--to=mattcen@cyber.com.au \
--cc=hooanon05g@gmail.com \
--cc=linux-unionfs@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.