Re: sandbox complaint

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 05/27/2010 04:12 PM, m.roth@xxxxxxxxx wrote:
> Daniel wrote:
>> On 05/27/2010 02:38 PM, m.roth@xxxxxxxxx wrote:
>>> Daniel wrote:
>>>> On 05/27/2010 12:19 PM, m.roth@xxxxxxxxx wrote:
>>>>> Daniel wrote:
>>>>>> On 05/27/2010 12:00 PM, m.roth@xxxxxxxxx wrote:
>>>>>>> Daniel wrote:
>>>>>>>> On 05/27/2010 11:49 AM, m.roth@xxxxxxxxx wrote:
>>>>>>>>> Updating a system from CentOS 5.4 (current) to 5.5, and I see:
>>>>>>>>>
>>>>>>>>> libsepol.scope_copy_callback: zosremote: Duplicate declaration in
>>>>>>>>> module:
>>>>>>>>> type/attribute zos_remote_t
>>>>>>>>> libsemanage.semanage_link_sandbox: Link packages failed
>>>>>>>>> semodule:  Failed!
>>>>> <snip>
>>>>>>>> Do you have multiple pp files definitin zosremote?
>>>>> <snip>
>>>>>> locate -r zos.*remote
>>>>>>
>>>>>> Might find the bad pp file.
>>> <snip>
>>>>> I don't believe they want me to remove it. Doing the locate, I find:
>>>>>> locate -r zos.*remote | grep .pp
>>>>> /etc/selinux/mls/modules/active/modules/zosremote.pp
>>>>> /etc/selinux/mls/modules/previous/modules/zosremote.pp
>>>>> /etc/selinux/targeted/modules/active/modules/zos_remote.pp
>>>>> /etc/selinux/targeted/modules/previous/modules/zos_remote.pp
>>>>> /old/etc/selinux/targeted/modules/active/modules/zos_remote.pp
>>>>> /old/etc/selinux/targeted/modules/previous/modules/zos_remote.pp
>>>>> /old/usr/share/selinux/mls/audispd-zos-remote.pp
>>>>> /old/usr/share/selinux/strict/audispd-zos-remote.pp
>>>>> /old/usr/share/selinux/targeted/audispd-zos-remote.pp
>>>>> /usr/share/selinux/mls/zosremote.pp
>>>>> /usr/share/selinux/targeted/zosremote.pp
>>>>>
>>>>> So, which should I get rid of, that was not cleaned up during the
>>>>> update?
>>>>
>>>> Remove all audispd-zos-remote.pp and zos_remote.pp
>>>>
>>>> We ship zosremote.pp
>>>
>>> Ok... I can do that, but are you saying to just rm it, and not whatever
>>> package it came in?
>>>
>>> And if it's not correct, why is it here, anyway? Anyone on the CentOS
>>> list? I don't want to screw around with this as "oh, it's only his weird
>>> problem", I figure that it's happening to a lot of other folks, and I'd
>>> like to make the problem go away for everyone. That, of course, means it
>>> the incorrect stuff needs to be removed from whatever package it's
>>> in....
>>>
>> I think you will find that it does not happen for everyone else and that
>> these files do not belong to other packages.  I have a feeling that
>> something went wrong on an update that left these files around.
>>
> Hmmm...but I don't know if rm'ing them will work, if they're in the d/b.
> So I suppose I'll have to find the package that put them there...
> <time passes>
> Ok, anyone on the CentOS list: does *anyone* know where this came from?
> It' sin the directory provided by
> selinux-policy-targeted-2.4.6-279.el5.noarch, but there's no zos_remote in
> the package.
> 
>            mark
> 
> --
> selinux mailing list
> selinux@xxxxxxxxxxxxxxxxxxxxxxx
> https://admin.fedoraproject.org/mailman/listinfo/selinux
> 
> 
Trust me on this, I know what I am talking about.

Just remove them.  They were put there by previous versions of audit and
maybe selinux-policy.  If you are concerned you can squirrel them away.

selinux-policy takes all pp files in the active directory and compiles
them into a policy module.


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkv+01wACgkQrlYvE4MpobPNBwCfSO90PDBbZTN5o3qvByauHVII
lVIAoK8xpawANQ+6vMnyI/Ee3J05FMke
=7CO6
-----END PGP SIGNATURE-----
--
selinux mailing list
selinux@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/selinux


[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux