From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from jazzhorn.ncsc.mil (mummy.ncsc.mil [144.51.88.129]) by tarius.tycho.ncsc.mil (8.13.1/8.13.1) with ESMTP id k9JEgGNR006718 for ; Thu, 19 Oct 2006 10:42:16 -0400 Received: from mx1.redhat.com (jazzhorn.ncsc.mil [144.51.5.9]) by jazzhorn.ncsc.mil (8.12.10/8.12.10) with ESMTP id k9JEN3wO001383 for ; Thu, 19 Oct 2006 14:23:04 GMT Message-ID: <45378A22.30202@redhat.com> Date: Thu, 19 Oct 2006 10:22:26 -0400 From: Daniel J Walsh MIME-Version: 1.0 To: abcde efghi CC: russell@coker.com.au, selinux@tycho.nsa.gov Subject: Re: nfs mount takes long time on x86 rhel4 u4 with selinux enabled References: <6a9b0ede0610100500v4bbe7866v661bb5939446cac2@mail.gmail.com> <6a9b0ede0610100735h1a92f4c3i890391f8a0b0238e@mail.gmail.com> <200610110107.16261.russell@coker.com.au> <6a9b0ede0610100956g5bf6e638n8a733d127cc9a4f9@mail.gmail.com> In-Reply-To: <6a9b0ede0610100956g5bf6e638n8a733d127cc9a4f9@mail.gmail.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Sender: owner-selinux@tycho.nsa.gov List-Id: selinux@tycho.nsa.gov abcde efghi wrote: > hi > > at present i dont have those logs > one last question. > > is it compulsory to do touch /.autorelabel when we are doing reboot? > and it should be done before or after reboot?(bit confused. i thought > after reboot) > note:i am moving from disabled to enforcing selinux > > thanks > > > On 10/10/06, Russell Coker wrote: >> On Wednesday 11 October 2006 00:35, "abcde efghi" >> wrote: >> > during installation time it was disabled >> > and during boottime i enabled it >> > (.i.e by setting selinux=enforcing in /etc/selinux/config and reboot) >> >> Before that reboot did you touch /.autorelabel? >> >> > that time it is taking some time to mount >> > what could be the pbm? is it really bcoz of portmap daemon? >> > how does portmap daemon cause this pbm? any pointers? >> >> If it's portmap then it's not an SE Linux issue and is best discussed on >> another list. >> >> > note the time and call trace details: >> > >> > time mount > > >> -orw,bg,nointr,hard,timeo=600,wsize=32768,rsize=32768,nfsvers=3,tcp,actimeo >> >> >=0, addr=10.0.0.60 >> >> You did not provide any information on AVC messages or the time taken >> for the >> mount command when SE Linux is in permissive mode (after running >> "setenforce 0"). Without such information we can't help you. You >> need to >> answer every question in my messages if you want useful answers from us. >> When you turn on SELinux you need to relabel the entire file system. touch /.autorelabel, will cause the init scripts to do this before any processes are running. This is the best way to turn on SELinux. After you are running SELinux you should not need to relabel again. >> -- >> russell@coker.com.au >> http://etbe.blogspot.com/ My Blog >> >> http://www.coker.com.au/sponsorship.html Sponsoring Free Software >> development >> > > -- > This message was distributed to subscribers of the selinux mailing list. > If you no longer wish to subscribe, send mail to > majordomo@tycho.nsa.gov with > the words "unsubscribe selinux" without quotes as the message. -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.