Hi,
Since a few updates I have notices that my configured mounts with pam_mount don’t work anymore. From what I can see, that seems to be related to SELinux for some reasons.
Okt 10 22:31:12 superion gdm-password][2983]: (pam_mount.c:568): pam_mount 2.16: entering session stage
Okt 10 22:31:12 superion gdm-session-worker[2983]: (pam_mount.c:568): pam_mount 2.16: entering session stage
Okt 10 22:31:12 superion gdm-password][2983]: (mount.c:251): Mount info: globalconf, user=<USER> <volume fstype="cifs" server="server.example.com" path="<USER>" mountpoint="/home/<USER>/Network/<USER>" cipher="(null)" fskeypath="(null)" fsk>
Okt 10 22:31:12 superion gdm-session-worker[2983]: (mount.c:251): Mount info: globalconf, user=<USER> <volume fstype="cifs" server="server.example.com" path="<USER>" mountpoint="/home/<USER>/Network/<USER>" cipher="(null)" fskeypath="(null)>
Okt 10 22:31:12 superion gdm-session-worker[2983]: (mount.c:660): Password will be sent to helper as-is.
Okt 10 22:31:12 superion gdm-session-worker[2983]: command: 'mount' '-t' 'cifs' '//server.example.com/<USER>' '/home/<USER>/Network/<USER>' '-o' 'username=<USER>,uid=2009,gid=5001'
Okt 10 22:31:12 superion gdm-password][2983]: (mount.c:660): Password will be sent to helper as-is.
Okt 10 22:31:12 superion gdm-password][2983]: command: 'mount' '-t' 'cifs' '//server.example.com/<USER>' '/home/<USER>/Network/<USER>' '-o' 'username=<USER>,uid=2009,gid=5001'
Okt 10 22:31:12 superion audit[3029]: AVC avc: denied { entrypoint } for pid=3029 comm="gdm-session-wor" path="/usr/bin/mount" dev="dm-1" ino=537179864 scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mount_ex>
Okt 10 22:31:12 superion audit[3029]: AVC avc: denied { entrypoint } for pid=3029 comm="gdm-session-wor" path="/usr/bin/mount" dev="dm-1" ino=537179864 scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mount_ex>
Okt 10 22:31:12 superion gdm-password][2983]: (mount.c:68): Messages from underlying mount program:
Okt 10 22:31:12 superion gdm-session-worker[2983]: (mount.c:68): Messages from underlying mount program:
Okt 10 22:31:12 superion gdm-session-worker[2983]: (mount.c:72): HXproc_run_async: mount: Permission denied
Okt 10 22:31:12 superion gdm-password][2983]: (mount.c:72): HXproc_run_async: mount: Permission denied
Okt 10 22:31:12 superion gdm-password][2983]: (mount.c:554): 23 93 0:22 / /proc rw,nosuid,nodev,noexec,relatime shared:13 - proc proc rw
Okt 10 22:31:12 superion gdm-session-worker[2983]: (mount.c:554): 23 93 0:22 / /proc rw,nosuid,nodev,noexec,relatime shared:13 - proc proc rw
Okt 10 22:31:12 superion gdm-session-worker[2983]: (mount.c:554): 24 93 0:23 / /sys rw,nosuid,nodev,noexec,relatime shared:2 - sysfs sysfs rw,seclabel
Okt 10 22:31:12 superion gdm-session-worker[2983]: (mount.c:554): 25 93 0:5 / /dev rw,nosuid shared:9 - devtmpfs devtmpfs rw,seclabel,size=14248696k,nr_inodes=3562174,mode=755,inode64
Okt 10 22:31:12 superion gdm-session-worker[2983]: (mount.c:554): 26 24 0:6 / /sys/kernel/security rw,nosuid,nodev,noexec,relatime shared:3 - securityfs securityfs rw
Okt 10 22:31:12 superion gdm-session-worker[2983]: (mount.c:554): 27 25 0:24 / /dev/shm rw,nosuid,nodev shared:10 - tmpfs tmpfs rw,seclabel,inode64
Okt 10 22:31:12 superion gdm-session-worker[2983]: (mount.c:554): 28 25 0:25 / /dev/pts rw,nosuid,noexec,relatime shared:11 - devpts devpts rw,seclabel,gid=5,mode=620,ptmxmode=000
Okt 10 22:31:12 superion gdm-session-worker[2983]: (mount.c:554): 29 93 0:26 / /run rw,nosuid,nodev shared:12 - tmpfs tmpfs rw,seclabel,size=5710376k,nr_inodes=819200,mode=755,inode64
Okt 10 22:31:12 superion gdm-session-worker[2983]: (mount.c:554): 30 24 0:27 / /sys/fs/cgroup rw,nosuid,nodev,noexec,relatime shared:4 - cgroup2 cgroup2 rw,seclabel,nsdelegate,memory_recursiveprot
Okt 10 22:31:12 superion gdm-session-worker[2983]: (mount.c:554): 31 24 0:28 / /sys/fs/pstore rw,nosuid,nodev,noexec,relatime shared:5 - pstore pstore rw,seclabel
Okt 10 22:31:12 superion gdm-session-worker[2983]: (mount.c:554): 32 24 0:29 / /sys/firmware/efi/efivars rw,nosuid,nodev,noexec,relatime shared:6 - efivarfs efivarfs rw
Okt 10 22:31:12 superion gdm-session-worker[2983]: (mount.c:554): 33 24 0:30 / /sys/fs/bpf rw,nosuid,nodev,noexec,relatime shared:7 - bpf none rw,mode=700
Okt 10 22:31:12 superion gdm-session-worker[2983]: (mount.c:554): 93 1 253:1 / / rw,relatime shared:1 - xfs /dev/mapper/vg00-lv_root rw,seclabel,attr2,inode64,logbufs=8,logbsize=32k,noquota
Okt 10 22:31:12 superion gdm-session-worker[2983]: (mount.c:554): 35 24 0:21 / /sys/fs/selinux rw,nosuid,noexec,relatime shared:8 - selinuxfs selinuxfs rw
Okt 10 22:31:12 superion gdm-password][2983]: (mount.c:554): 24 93 0:23 / /sys rw,nosuid,nodev,noexec,relatime shared:2 - sysfs sysfs rw,seclabel
Okt 10 22:31:12 superion gdm-session-worker[2983]: (mount.c:554): 34 23 0:32 / /proc/sys/fs/binfmt_misc rw,relatime shared:14 - autofs systemd-1 rw,fd=31,pgrp=1,timeout=0,minproto=5,maxproto=5,direct,pipe_ino=26868
Okt 10 22:31:12 superion gdm-session-worker[2983]: (mount.c:554): 36 25 0:20 / /dev/mqueue rw,nosuid,nodev,noexec,relatime shared:15 - mqueue mqueue rw,seclabel
Okt 10 22:31:12 superion gdm-session-worker[2983]: (mount.c:554): 37 25 0:33 / /dev/hugepages rw,relatime shared:16 - hugetlbfs hugetlbfs rw,seclabel,pagesize=2M
Okt 10 22:31:12 superion gdm-session-worker[2983]: (mount.c:554): 38 24 0:7 / /sys/kernel/debug rw,nosuid,nodev,noexec,relatime shared:17 - debugfs debugfs rw,seclabel
Okt 10 22:31:12 superion gdm-session-worker[2983]: (mount.c:554): 39 24 0:12 / /sys/kernel/tracing rw,nosuid,nodev,noexec,relatime shared:18 - tracefs tracefs rw,seclabel
Okt 10 22:31:12 superion gdm-session-worker[2983]: (mount.c:554): 40 24 0:34 / /sys/fs/fuse/connections rw,nosuid,nodev,noexec,relatime shared:19 - fusectl fusectl rw
Okt 10 22:31:12 superion gdm-session-worker[2983]: (mount.c:554): 41 24 0:35 / /sys/kernel/config rw,nosuid,nodev,noexec,relatime shared:20 - configfs configfs rw
Okt 10 22:31:12 superion gdm-session-worker[2983]: (mount.c:554): 88 93 0:36 / /tmp rw,nosuid,nodev shared:40 - tmpfs tmpfs rw,seclabel,nr_inodes=409600,inode64
Okt 10 22:31:12 superion gdm-session-worker[2983]: (mount.c:554): 91 93 253:2 / /var rw,relatime shared:46 - xfs /dev/mapper/vg00-lv_var rw,seclabel,attr2,inode64,logbufs=8,logbsize=32k,noquota
Okt 10 22:31:12 superion gdm-session-worker[2983]: (mount.c:554): 95 93 253:3 / /home rw,relatime shared:48 - xfs /dev/mapper/vg00-lv_home rw,seclabel,attr2,inode64,logbufs=8,logbsize=32k,noquota
Okt 10 22:31:12 superion gdm-session-worker[2983]: (mount.c:554): 98 93 259:2 / /boot rw,relatime shared:50 - ext4 /dev/nvme0n1p2 rw,seclabel
Okt 10 22:31:12 superion gdm-session-worker[2983]: (mount.c:554): 101 98 259:1 / /boot/efi rw,relatime shared:52 - vfat /dev/nvme0n1p1 rw,fmask=0077,dmask=0077,codepage=437,iocharset=ascii,shortname=winnt,errors=remount-ro
Okt 10 22:31:12 superion gdm-session-worker[2983]: (mount.c:554): 355 91 0:43 / /var/lib/nfs/rpc_pipefs rw,relatime shared:188 - rpc_pipefs sunrpc rw
Okt 10 22:31:12 superion gdm-session-worker[2983]: (mount.c:554): 1175 29 0:53 / /run/user/42 rw,nosuid,nodev,relatime shared:638 - tmpfs tmpfs rw,seclabel,size=2855184k,nr_inodes=713796,mode=700,uid=42,gid=42,inode64
Okt 10 22:31:12 superion gdm-session-worker[2983]: (mount.c:554): 1433 29 0:58 / /run/user/2009 rw,nosuid,nodev,relatime shared:776 - tmpfs tmpfs rw,seclabel,size=2855184k,nr_inodes=713796,mode=700,uid=2009,gid=5001,inode64
Okt 10 22:31:12 superion gdm-password][2983]: (mount.c:554): 25 93 0:5 / /dev rw,nosuid shared:9 - devtmpfs devtmpfs rw,seclabel,size=14248696k,nr_inodes=3562174,mode=755,inode64
Okt 10 22:31:12 superion gdm-session-worker[2983]: (mount.c:554): 1478 88 0:59 / /tmp/.mount_appimaKE1gUT ro,nosuid,nodev,relatime shared:825 - fuse.appimaged-646-x86_64.AppImage appimaged-646-x86_64.AppImage ro,user_id=2009,group_id=5001
Okt 10 22:31:12 superion gdm-session-worker[2983]: (pam_mount.c:522): mount of <USER> failed
Do you have any idea why and how to fix it or debug further?
Thanks in advance!