[rsbac] Re: File Flags and mount

[Chirag Pandya]

Hello All,

> I have a problem with mount and file flags.
> When I try mounting an iso image as shown below:
> bash# mount -t iso9660 -o loop,ro /tmp/Image.iso /tmp/blah/
> ioctl: LOOP_SET_FD: Operation not permitted
>
> I get:
>
> Thu Dec 22 12:38:58 2005 :<6>0000001392|rsbac_adf_request(): request
> MOUNT, pid 8631, ppid 8438, prog_name mount, uid 0, audit_uid 502,
> target_type FILE, tid Device 08:02 Inode 112226 Path //tmp/Image.iso,
> attr , value none, result NOT_GRANTED by FF

Upon further investigation, I discovered that /tmp was mounted separately.

/tmp was mounted on /dev/sda3, and the loop device(s) (/dev/loop1)
reside under /dev/sda2.  When I moved Image.iso to /root/Image.iso,
the mount call worked fine.

If I disable RSBAC (using softmode) both mount calls work correctly.

--
Chirag