smack-team / smack

Smack userspace
GNU Lesser General Public License v2.1
41 stars 33 forks source link

smack with nfs #138

Open nyanmark opened 1 year ago

nyanmark commented 1 year ago

When I enable the smack lsm and try to mount an nfs share I get mount.nfs: Protocol error as soon as I disable smack it mounts without issues, I have nfs-utils 2.6.2 and smackctl 1.3.1, I set smack logging to 3 but the only things in dmesg are access granted and no errors.

cschaufler commented 1 year ago

What kernel version are you using? When labeled NFS support was added to the kernel it was only validated using SELinux. Check the values for CONFIG_NFS_V4_SECURITY_LABEL and CONFIG_NFSD_V4_SECURITY_LABEL. If they are set to "y" you may have better results turning them off.