Re: SELinux-related Rawhide breakage today

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 01/31/2012 12:07 PM, Jerry James wrote:
> After installing today's Rawhide updates on an x86_64 VM, I
> started having troubles running programs.  Nothing linked with
> libselinux.so.1 could actually open that library; the programs were
> getting EACCESS on the attempt.  I figured I needed to do a
> relabel, but since restorecon is linked with libselinux.so.1,
> .....
> 
> I touched /.autorelabel and rebooted.  The system couldn't even
> shut down, so I had to do a sync and a forced shutoff.  When the
> system came back up, it immediately started complaining about lots
> of programs that were unable to load libcrypt.  So I forced it off
> again and rebooted with enforcing=0.  That worked, but skipped the 
> relabeling step!  I got a root shell and ran restorecon by hand to 
> relabel.  The only file that got relabeled was this, which looks 
> wrong:
> 
> restorecon reset /lib64/libproc-3.2.8.so context 
> system_u:object_r:lib_t:s0->system_u:object_r:default_t:s0
> 
> Is something broken in SELinux land today?

Yes we have shipped a policy that requires the usrmove functionality.

If you add

/lib64 /lib

to

/etc/selinux/targeted/contexts/files/file_contexts.subs_dist

Then run restorecon -R -v /lib64

It should fix the labeling.

Not sure when usrmove is being pushed.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk8oPGMACgkQrlYvE4MpobNmBACfSbrkelBr4b3q3fSj4lGnYi0q
AAEAoIzMC8OH7iRSh5g1H9uZfBFZ1fgx
=jRjs
-----END PGP SIGNATURE-----
-- 
devel mailing list
devel@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/devel



[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]
  Powered by Linux