On Thu, Dec 09, 2004 at 08:26:34AM -0500, Stephen Smalley wrote: > On Thu, 2004-12-09 at 08:19, Stephen Smalley wrote: > > The 'ls' output indicates that the libpcre shared object is labeled > > correctly, so I wonder if he had already relabeled it via fixfiles or > > restorecon prior to running that ls. > > > > The prelink.log file does include some 'Could not get security context" > > errors (with errno ENODATA), which is interesting, but peculiar that > > there is no such error for the libpcre shared object, since that is the > > one that is triggering this denial. The lack of any context on those > > files is very odd unless he ran with SELinux disabled for a while (in > > which case the files would indeed end up with no context if they were > > updated while SELinux was disabled and he failed to relabel when he > > re-enabled SELinux). > > Note: I added a comment to the bugzilla entry with this information and > also asked the bug reporter several follow-up questions. Thanks Stephen. If you'd rather I just CC you immediately the next time this is reported, or if you have some new questions I should be asking people, then just let me know. joe
