MondoRescue 2.2.9.2 on SELinux Enabled System - Problems logging in after restore.

[Alzhy]

Anyone using the latest version? It supposedly now suports SELinux. I Tried backing up one server and restoring on anothere that is *exactly* the same but the restoerd OS is not login'able -- even by root..

Anyone tried MondoRescue with SELinux engaled yet?

Thanks.

[Steven E. Protter]

Shalom,

Have not tried that yet. I would note that I've been burned by mondorescue quality control before.

You have just been enrolled in the mondorescue beta testing program. Your compensation will be $0

SEP

[Alzhy]

I wonder i there is already a recipe for backing up and restoring (OS-wise that is) an SELinux Enabled System...

I think the issue is on Mondorestore -- the security contexts are NOT restored...

I noticed that ssh to the system simply yields:

root@mgmtsrv# ssh sapsrv
password:
Last login: Thu Mar 11 13:48:17 2010
/bin/bash: Permission denied
Connection to flti001 closed.

I guess I can try to boot rescue and "re-label" the fileystems and probly disable SELinux first?

[Michal Kapalka (mikap)]

Hi Alzhy,

check this link :

http://trac.mondorescue.org/wiki/FAQ#Q32IsMondoRescueworkingwithSELinux

mikap

[Alzhy]

Thanks Mikap.

As I said I am using 2.2.9.2.

Late last night I had a breakthrough.. And the workaround I did was just before the reboot after mondorestore - I added a .autorelabel file on each filesystem. And presto! Problem solved. Still QA'ing the restrored env though if something's amiss -- bt what do you think of this workaround?

There was however a minor complication. One of the restored filesystems -- /home - the homedir folders restored did not have the corect logind ownerships but groupid is correct. For example:

# ls -d tg1282
drwx------ 3 45586 sysadmin 4096 Mar 11 16:48 tg1282

# grep tg1282 /etc/passwd
tg1282:x:6926866:14:Tokwakus Guwapolous:/home/tg1282:/bin/bash

Those homedir folders that have the correct login ownerships seem to be with uid less than 65535.

Other than this -- It appears MondoRrestore worked...

[Steven E. Protter]

Shalom again,

I think your workaround has the benefit of having worked.

Therefore I love it.

You might want to update the mondorescue folks so they add this trick to the documentation.

SEP
131 to Linux Mount Olympus with a Penguin on top.