Please note the following points when OS is updated to RHEL7.1 or later version and RHEL8.
When using GFS in an environment where SELinux is enabled, due to the specification change in OS, the SELinux security context of a file on the GFS Shared File System displayed by the following operations is changed:
When the following command is executed to display the list of the GFS Shared File System (if the previous OS version is RHEL7.0)
mount(8) without option specified
When the following commands are executed to display the security context of the file on the GFS Shared File System
dir(1) -Z, --context
ls(1) -Z, --context
vdir(1) -Z, --context
find(1) -printf "%Z"
stat(1) without option specified, -c %C, --format=%C, --printf=%C
Here are samples of the command execution and display:
mount(8)
[RHEL7.0]
# mount | grep /mnt/gfs01 <Enter> /dev/sfdsk/gfs/dsk/gfs01 on /mnt/gfs01 type sfcfs (rw,relatime,context=system_u:object_r:file_t:s0) |
[RHEL7.1 or later version and RHEL8]
# mount | grep /mnt/gfs01 <Enter> /dev/sfdsk/gfs/dsk/gfs01 on /mnt/gfs01 type sfcfs (rw,relatime,context=system_u:object_r:unlabeled_t:s0) |
ls(1)
[RHEL6 and RHEL7.0]
# ls -Z /mnt/gfs01/file01 <Enter> -rw-r--r--. root root system_u:object_r:file_t:s0 /mnt/gfs01/file01 |
[RHEL7.1 or later version and RHEL8]
# ls -Z /mnt/gfs01/file01 <Enter> -rw-r--r--. root root system_u:object_r:unlabeled_t:s0 /mnt/gfs01/file01 |
