Daniel J Walsh wrote: > Wart wrote: >> Wart wrote: >> [...] >>> Still no luck. I restored the machine to a previously working state, and >>> then upgraded both procps and *selinux*. Immediately after the >>> upgrade ps >>> stopped showing contexts again. >>> >>> [...] Updated: libselinux.i386 0:2.0.31-2.fc8 libselinux-python.i386 >>> 0:2.0.31-2.fc8 selinux-policy.noarch 0:3.0.6-3.fc8 >>> selinux-policy-devel.noarch 0:3.0.6-3.fc8 >>> selinux-policy-targeted.noarch 0:3.0.6-3.fc8 Dependency Updated: >>> libsemanage.i386 0:2.0.4-1.fc8 >>> libsepol.i386 0:2.0.7-1.fc8 policycoreutils.i386 0:2.0.25-2.fc8 >>> policycoreutils-gui.i386 0:2.0.25-2.fc8 Complete! [root@localhost ~]# ps >>> auwxZ | head LABEL USER PID %CPU %MEM >>> VSZ RSS TTY STAT START TIME COMMAND - >>> root 1 0.0 0.1 2108 624 ? Ss 02:30 0:02 init [5] - >>> root 2 0.0 0.0 0 0 ? S< 02:30 0:00 [kthreadd] - >>> root 3 0.0 0.0 0 0 ? S< 02:30 0:00 [migration/0] - >>> root 4 0.0 0.0 0 0 ? S< 02:30 0:00 [ksoftirqd/0] - >>> root 5 0.0 0.0 0 0 ? S< 02:30 0:00 [watchdog/0] - >>> root 6 0.0 0.0 0 0 ? S< 02:30 0:00 [events/0] - >>> root 7 0.0 0.0 0 0 ? S< 02:30 0:00 [khelper] - >>> root 58 0.0 0.0 0 0 ? S< 02:30 0:00 [kblockd/0] - >>> root 61 0.0 0.0 0 0 ? S< 02:30 0:00 [kacpid] >>> [root@localhost ~]# rpm -q selinux-policy selinux-policy-3.0.6-3.fc8 >>> [root@localhost ~]# rpm -q procps procps-3.2.7-15.1.fc8 >>> >>> When I get some time I'll start with a fresh F-7 install and then upgrade >>> to rawhide. Maybe some intermediate update broke things beyond repair. >> I think I found the problem. > >> 'ps' tries to find and open 'libselinux.so'. At some point this library >> was >> moved from libselinux to libselinux-devel. Since I didn't have >> libselinux-devel installed, ps failed to load the library and find the >> selinux >> context information. > >> Installing libselinux-devel fixes the problem. > >> I see three possible ways to fix this: > >> 1) Move libselinux.so back to libselinux >> 2) Add 'Requires: libselinux-devel' to procps >> 3) Fix ps to load libselinux.so.1 instead of the unversioned .so file. > >> --Wart > I will move it back to libselinux package. The procps owner is also going to change ps to load libselinux.so.1 (BZ# 255441) Both of these changes should make it far less likely to be a problem again. Thanks, --Wart -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list
