Important Update: Cohesity Products Knowledge Base Articles
All Cohesity Knowledge Base Articles are now managed via the Cohesity Support Portal: https://support.cohesity.com/. The Knowledge Base articles available here will not reflect the latest information or may no longer be accessible.
'Operation not supported' error when using the 'chcon' command with SELinux in permissive mode on InfoScale 7.4/rhel7.5
Problem
When using the 'chcon' command with SELinux in permissive mode on InfoScale 7.4/rhel7.5, an error is encountered.
For example on a filesystem called /test1:
# pwd /test1 # ls -laZ drwxr-xr-x. root root system_u:object_r:vxfs_t:s0 . dr-xr-xr-x. root root system_u:object_r:root_t:s0 .. drwxr-xr-x. root root system_u:object_r:vxfs_t:s0 lost+found -rw-r--r--. root root unconfined_u:object_r:vxfs_t:s0 test # chcon -u system_u test chcon: failed to change context of ‘test’ to ‘system_u:object_r:vxfs_t:s0’: Operation not supported
Error Message
chcon: failed to change context of ‘test’ to ‘system_u:object_r:vxfs_t:s0’: Operation not supported
Cause
Although InfoScale 7.4 has the necessary changes to make the security extended attribute “Security.selinux” work on VxFS filesystems, it also required changes to the Redhat Operating System. These changes have not been implemented and supported until Redhat 7.6.
Solution
InfoScale 7.4.0.1200 (due in November 2018 and will include VxFS 7.4.0.1400) will support Redhat 7.6 and it has been confirmed that the 'chcon' command works correctly on this version.