Strange Associate bug

[Daniel J Walsh <dwalsh@redhat.com>]

If I mount an NFS filesystem and then try to move a file to it,
I get permission denied and end up with an associate error

 >mount remote:/vol/vol1/home /mnt/dwalsh
 >touch /home/dwalsh/foo
 >mv /home/dwalsh/foo /mnt/dwalsh
mv: cannot create regular file `./foo': Permission denied
Sep 17 15:48:19 celtics kernel: audit(1095450499.359:0): avc:  denied  { 
associate } for  pid=19797 exe=/bin/mv name=foo 
scontext=user_u:object_r:user_home_t tcontext=system_u:object_r:nfs_t 
tclass=filesystem

allow user_home_t nfs_t:filesystem { associate };

Do I need to change mv to be able to handle this or do we need

allow domain nfs_t:filesystem associate;

Dan

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.