Re: nfs mount takes long time on x86 rhel4 u4 with selinux enabled

[Daniel J Walsh <dwalsh@redhat.com>]

abcde efghi wrote:
> hi
>
> at present i dont have those logs
> one last question.
>
> is it compulsory to do touch /.autorelabel when we are doing reboot?
> and it should be done before or after reboot?(bit confused. i thought
> after reboot)
> note:i am moving from disabled to enforcing selinux
>
> thanks
>
>
> On 10/10/06, Russell Coker <russell@coker.com.au> wrote:
>> On Wednesday 11 October 2006 00:35, "abcde efghi" <svmdcv@gmail.com> 
>> wrote:
>> > during installation time it was disabled
>> > and during boottime i enabled it
>> > (.i.e by setting selinux=enforcing in /etc/selinux/config and reboot)
>>
>> Before that reboot did you touch /.autorelabel?
>>
>> > that time it is taking some time to mount
>> > what could be the pbm? is it really bcoz of portmap daemon?
>> > how does portmap daemon cause this pbm? any pointers?
>>
>> If it's portmap then it's not an SE Linux issue and is best discussed on
>> another list.
>>
>> > note the time and call trace details:
>> >
>> > time mount <server:/disk/disk1/data1/ /mnt --type nfs
>> > 
>> -orw,bg,nointr,hard,timeo=600,wsize=32768,rsize=32768,nfsvers=3,tcp,actimeo 
>>
>> >=0, addr=10.0.0.60
>>
>> You did not provide any information on AVC messages or the time taken 
>> for the
>> mount command when SE Linux is in permissive mode (after running
>> "setenforce 0").  Without such information we can't help you.  You 
>> need to
>> answer every question in my messages if you want useful answers from us.
>>
When you turn on SELinux you need to relabel the entire file system.  
touch /.autorelabel, will cause the init scripts to do this before any 
processes are running.   This is the best way to turn on SELinux.  After 
you are running SELinux you should not need to relabel again.
>> -- 
>> russell@coker.com.au
>> http://etbe.blogspot.com/          My Blog
>>
>> http://www.coker.com.au/sponsorship.html Sponsoring Free Software 
>> development
>>
>
> -- 
> This message was distributed to subscribers of the selinux mailing list.
> If you no longer wish to subscribe, send mail to 
> majordomo@tycho.nsa.gov with
> the words "unsubscribe selinux" without quotes as the message.


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.