Util-Linux package development
 help / color / mirror / Atom feed
From: Davidlohr Bueso <dave@gnu.org>
To: "Ted Ts'o" <tytso@mit.edu>
Cc: Daniel Drake <dsd@laptop.org>, util-linux@vger.kernel.org
Subject: Re: Can't remount loopback ext4 without /etc/mtab
Date: Sun, 24 Jul 2011 18:46:21 -0400	[thread overview]
Message-ID: <1311547581.3367.1.camel@offbook> (raw)
In-Reply-To: <20110724195713.GH3469@thunk.org>

On Sun, 2011-07-24 at 15:57 -0400, Ted Ts'o wrote:
> On Sun, Jul 24, 2011 at 07:09:47PM +0100, Daniel Drake wrote:
> > 
> > When the error occurs, dmesg says:
> > [ 5495.860391] EXT4-fs (loop0): Unrecognized mount option "seclabel"
> > or missing value
> > 
> > Here is the corresponding entry from /proc/mounts:
> > /dev/loop0 /home/dsd/tmpdisk/mountpt ext4
> > rw,seclabel,relatime,barrier=1,data=ordered 0 0
> > 
> > Is this a util-linux bug? Or an ext4 issue?
> 
> Or a selinux thing; "seclabel" seems to be SELinux's fault:
> 

It would seem so, I can't reproduce this issue on a "normal", non
SELinux box.

> % git grep LABELSUPP_STR
> security/selinux/hooks.c:       {Opt_labelsupport, LABELSUPP_STR},
> security/selinux/hooks.c:                       seq_puts(m, LABELSUPP_STR);
> security/selinux/hooks.c:               match_prefix(LABELSUPP_STR, sizeof(LABEL
> security/selinux/include/security.h:#define LABELSUPP_STR "seclabel"
> 
> Personally, I find my life has been much happier since I gave up on
> SELinux as being too complicated to be secure.

+1!!

- Davidlohr


  reply	other threads:[~2011-07-24 22:46 UTC|newest]

Thread overview: 7+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2011-07-24 18:09 Can't remount loopback ext4 without /etc/mtab Daniel Drake
2011-07-24 19:57 ` Ted Ts'o
2011-07-24 22:46   ` Davidlohr Bueso [this message]
2011-07-25  9:06   ` Karel Zak
2011-07-25  9:20     ` Daniel Drake
2011-07-25  9:46       ` Karel Zak
2011-07-26 19:29         ` Daniel Drake

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1311547581.3367.1.camel@offbook \
    --to=dave@gnu.org \
    --cc=dsd@laptop.org \
    --cc=tytso@mit.edu \
    --cc=util-linux@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox