On Wed, Aug 27, 2014 at 6:10 PM, Steve Lawrence <slawrence@xxxxxxxxxx> wrote: > The only action that should be required post upgrade is migration from > /etc/selinux to /var/lib/selinux. There is detailed information about > this process on the GitHub "Policy Store Migration" wiki page [2], but > the jist of it is after upgrading, execute the the > semanage_migrate_store script installed by default to > /usr/libexec/selinux. The script has additional options that can be used > to do things like remove the old store or prevent rebuilding the policy. > Run the script with --help for a description of the options. > > Please let us know if there are any questions/issues. Hi Steve (Sorry for the direct mail in the previous remark, gmail doesn't like to automatically reply to the mailinglist) When running the semanage_migrate_script I get the following problem: Migrating from /etc/selinux/mcs/modules/active to /var/lib/selinux/mcs/active Attempting to rebuild policy from /var/lib/selinux sysnetwork: Warning: 'else' blocks in optional statements are unsupported in CIL. Dropping from output. Segmentation fault The segmentation fault comes up at the following python code: rc = semanage.semanage_commit(handle) In the logs, I get: [ 2403.250065] semanage_migrat[25752]: segfault at 28 ip 000003044dd14c5b sp 000003d2272a1140 error 4 in libsepol.so.1[3044dcb2000+8f000] The system has grsecurity enabled as well, but grsecurity should give more output if it was preventing something. I'll investigate this more tomorrow-evening. Wkr, Sven Vermeulen _______________________________________________ Selinux mailing list Selinux@xxxxxxxxxxxxx To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.
