topic MondoRescue 2.2.9.2 on SELinux Enabled System - Problems logging in after restore. in Operating System - Linux

MondoRescue 2.2.9.2 on SELinux Enabled System - Problems logging in after restore.

Alzhy — Thu, 11 Mar 2010 17:41:00 GMT

Anyone using the latest version? It supposedly now suports SELinux. I Tried backing up one server and restoring on anothere that is *exactly* the same but the restoerd OS is not login'able -- even by root..

Anyone tried MondoRescue with SELinux engaled yet?

Thanks.

Re: MondoRescue 2.2.9.2 on SELinux Enabled System - Problems logging in after restore.

Steven E. Protter — Thu, 11 Mar 2010 17:57:59 GMT

Shalom,

Have not tried that yet. I would note that I've been burned by mondorescue quality control before.

You have just been enrolled in the mondorescue beta testing program. Your compensation will be $0

SEP

Re: MondoRescue 2.2.9.2 on SELinux Enabled System - Problems logging in after restore.

Alzhy — Thu, 11 Mar 2010 23:01:09 GMT

I wonder i there is already a recipe for backing up and restoring (OS-wise that is) an SELinux Enabled System...

I think the issue is on Mondorestore -- the security contexts are NOT restored...

I noticed that ssh to the system simply yields:

root@mgmtsrv# ssh sapsrv
password:
Last login: Thu Mar 11 13:48:17 2010
/bin/bash: Permission denied
Connection to flti001 closed.

I guess I can try to boot rescue and "re-label" the fileystems and probly disable SELinux first?

Re: MondoRescue 2.2.9.2 on SELinux Enabled System - Problems logging in after restore.

Michal Kapalka (mikap) — Fri, 12 Mar 2010 07:37:50 GMT

Hi Alzhy,

check this link :

http://trac.mondorescue.org/wiki/FAQ#Q32IsMondoRescueworkingwithSELinux

mikap

Re: MondoRescue 2.2.9.2 on SELinux Enabled System - Problems logging in after restore.

Alzhy — Fri, 12 Mar 2010 13:36:52 GMT

Thanks Mikap.

As I said I am using 2.2.9.2.

Late last night I had a breakthrough.. And the workaround I did was just before the reboot after mondorestore - I added a .autorelabel file on each filesystem. And presto! Problem solved. Still QA'ing the restrored env though if something's amiss -- bt what do you think of this workaround?

There was however a minor complication. One of the restored filesystems -- /home - the homedir folders restored did not have the corect logind ownerships but groupid is correct. For example:

# ls -d tg1282
drwx------ 3 45586 sysadmin 4096 Mar 11 16:48 tg1282

# grep tg1282 /etc/passwd
tg1282:x:6926866:14:Tokwakus Guwapolous:/home/tg1282:/bin/bash

Those homedir folders that have the correct login ownerships seem to be with uid less than 65535.

Other than this -- It appears MondoRrestore worked...

Re: MondoRescue 2.2.9.2 on SELinux Enabled System - Problems logging in after restore.

Steven E. Protter — Fri, 12 Mar 2010 13:44:16 GMT

Shalom again,

I think your workaround has the benefit of having worked.

Therefore I love it.

You might want to update the mondorescue folks so they add this trick to the documentation.

SEP
131 to Linux Mount Olympus with a Penguin on top.