Tom London wrote:
Is this safe to ignore? Should I reinstall offending packages
running in permissive mode? Other?
/etc/ld.so* has wrong file context.
You should see a 'C' in the last character of the verify output if the ondisk file context does not match whatever is returned by applying selinux regexes. Note that this assumes the files are in a package, that may not be the case for /etc/ld.so.cache.
Here's an example of some file context failures:
# rpm -Vf /etc/ld.so* ........C /usr/lib/gconv/gconv-modules.cache ........C /usr/lib/gconv/gconv-modules.cache ........C /usr/lib/gconv/gconv-modules.cache file /etc/ld.so.conf.rpmnew is not owned by any package
HTH
73 de Jeff
