No Write Permission on ACFS Mount Point

最新推荐文章于 2024-04-02 16:39:37 发布

原创最新推荐文章于 2024-04-02 16:39:37 发布 · 950 阅读

0 ·

CC 4.0 BY-SA版权

oracle 专栏收录该内容

150 篇文章

订阅专栏

本文讨论了在使用Oracle数据库的企业版11.2.0.3到11.2.0.3版本在Linux x86-64系统中遇到的SELinux权限问题。详细描述了问题症状、原因以及解决方案。通过禁用SELinux，成功创建了在ACFS目录下的文件。同时，提供了针对Oracle ACFS文件系统与SELinux兼容性的文档参考。

In this Document

APPLIES TO:

Oracle Database - Enterprise Edition - Version 11.2.0.3 to 11.2.0.3 [Release 11.2]
Linux x86-64

SYMPTOMS

As oracle/ Grid user

  oracle@
 <name> ~]$ cd /backup/
 
 [oracle@
 <name> backup]$ touch test
 
 touch: cannot touch `test': Permission denied
 
 [oracle@
 <name> backup]$

As root

  [root@<name> oracle]# cd /backup/
 
 [root@
 <name> backup]# touch test
 
 touch: cannot touch `test': Permission denied
 
 [root@
 <name> backup]#

The permission on the mount point was 755 -- still they had the above issue.

You are trying to vi open a General Purpose ACFS and encountering

      E212: Can't open file for writing

CHANGES

none

CAUSE

SELinux is enabled on the system

strace -aef -o /temp/strace.out vi test.txt

shows:

open("/lib64/libselinux.so.1", O_RDONLY) = 3 <----------------- here
...
open("/proc/self/task/9688/attr/current", O_RDONLY) = 4
read(4, "unconfined_u:unconfined_r:unconf"..., 4095) = 54
close(4) = 0
getxattr("/var/tmp/test.txt.swp", "security.selinux",
"unconfined_u:object_r:user_tmp_t:s0", 255) = 36 <--------------- here
open("/selinux/mls", O_RDONLY) = 4
read(4, "1", 19) = 1
close(4) = 0
socket(PF_FILE, SOCK_STREAM|SOCK_CLOEXEC, 0) = 4
connect(4, {sa_family=AF_FILE, path="/var/run/setrans/.setrans-unix"}, 110) =
-1 ENOENT (No such file or directory)
close(4) = 0
getxattr("/var/tmp/test.txt.swp", "security.selinux",
"unconfined_u:object_r:user_tmp_t:s0", 255) = 36
lseek(3, 0, SEEK_SET) = 0
write(3, "b0VIM 7.2\0\0\0\0\20\0\0\0\0\0\0\0\0\0\0\330%\0\0grid"..., 4096) =
4096
select(1, [0], NULL, [0], {0, 0}) = 0 (Timeout)

SOLUTION

Disable SELinux -- They were able to create the files in the acfs directory

Documentation reference for compatibility of SELinux and ACFS:
-------------------------------------------------------------------------------------------------
http://st-doc.us.oracle.com/11/112/install.112/e41961/storage.htm#CWLIN257
Oracle® Grid Infrastructure Installation Guide
11g Release 2 (11.2) for Linux
E41961-03
Note:
Deployment of Security Enhanced Linux (SELinux) is not supported on Oracle
ACFS file systems.
-------------------------------------------------------------------------------------------------

Please use 'sestatus' to check if SELinux is enabled. If enabled, it must be disabled.