<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>So an individual was following <a href="https://bugzilla.redhat.com/show_bug.cgi?id=1253926" target="_blank">https://bugzilla.redhat.com/show_bug.cgi?id=1253926</a> and wanted to download the latest patch from koji to upgrade his selinux policy manually. It looks like he downloaded rpm: <b>selinux-policy-3.13.1-128.12.fc22.noarch.rpm </b>and he said that on reboot, his system froze and stated that the selinux policy could not be loaded. I sent him an email asking him to grep the RPM db to see what selinux packages were installed (thinking that he forgot to download and install the selinux-policy-targeted package).<div><br></div><div>Below is what he sent back...it does not look like the targeted packages is installed on his system. Since I am at work, I do not have access to a F22 workstation to see what is installed by default. Any suggestions? </div><div><br></div><div>Devon<br><br><div><hr id="stopSpelling">Subject: Re: SELINUX Issue<br>From: avg1209@zoho.com<br>To: devo8604@outlook.com<br>Date: Tue, 25 Aug 2015 14:27:08 -0400<br><br><div>Hi Devon,</div><div><br></div><div><span style="font-size:12pt;">Here you are:</span></div><div><br></div><div>[<a href="mailto:ag@prhost1">ag@prhost1</a> ~]$ rpm -qa | grep selinux* </div><div>libselinux-2.3-10.fc22.x86_64</div><div>libselinux-python-2.3-10.fc22.x86_64</div><div>selinux-policy-3.13.1-128.10.fc22.noarch</div><div>selinux-policy-devel-3.13.1-128.10.fc22.noarch</div><div>rpm-plugin-selinux-4.12.0.1-12.fc22.x86_64</div><div>libselinux-utils-2.3-10.fc22.x86_64</div><div>libselinux-2.3-10.fc22.i686</div><div><br></div><div>Here is what I did today:</div><div><br></div><div>- I downloaded and installed following RPM from <a href="http://koji.fedoraproject.org/koji/buildinfo?buildID=679465" style="font-size:12pt;" target="_blank">http://koji.fedoraproject.org/koji/buildinfo?buildID=679465</a></div><div><br></div><div><span class="ecxApple-tab-span" style="white-space:pre;"> </span><span style="font-size:12pt;">428500 Aug 25 10:58 <b>selinux-policy-3.13.1-128.12.fc22.noarch.rpm</b></span></div><div><span style="font-size:12pt;"><br></span></div><div><span style="font-size:12pt;">- rebooted and got the error "Failed to load SELinux policy, freezing"</span></div><div><span style="font-size:12pt;">- set "selinux=0" kernel parameter and booted</span></div><div><span style="font-size:12pt;">- downgraded: "</span><span style="font-size:12pt;">dnf downgrade <b>selinux-policy-3.13.1-128.10.fc22.noarch</b></span><span style="font-size:12pt;">"</span></div><div><span style="font-size:12pt;"><br></span></div><div><span style="font-size:12pt;">I am currently in this state. But it looks like at every boot it tries to relabel the whole system, it takes way too long and that is why I am still booting with "selinux=0" to be able to work.</span></div><div><span style="font-size:12pt;"><br></span></div><div><span style="font-size:12pt;">Could you recommend how can I return to what I had before all my steps described above? I will rather wait for the official update of the selinux-policy package, which I guess will eb thoroughly tested.</span></div><div><span style="font-size:12pt;"><br></span></div><div><span style="font-size:12pt;">Thank you,</span></div><div><span style="font-size:12pt;">- Andrew</span></div><div><br></div><div>-----Original Message-----</div><div><b>From</b>: Devon Smith <<a href="mailto:Devon%20Smith%20%3cdevo8604@outlook.com%3e">devo8604@outlook.com</a>></div><div><b>To</b>: avg1209@zoho.com <<a href="mailto:%22avg1209@zoho.com%22%20%3cavg1209@zoho.com%3e">avg1209@zoho.com</a>></div><div><b>Subject</b>: SELINUX Issue</div><div><b>Date</b>: Tue, 25 Aug 2015 12:09:16 -0600</div><div><br></div>
<style><!--
.ExternalClass .ecxhmmessage P {
padding:0px;
}
.ExternalClass body.ecxhmmessage {
font-size:12pt;
font-family:Calibri;
}
--></style>
<div dir="ltr">Andrew,<div> can you do me a favor and run:</div><div><br></div><div>rpm -qa | grep selinux* </div><div><br></div><div>There should be at least two selinux policy rpms installed, selinux-policy and selinux-targeted? Did you download/install the updated rpm for both or just selinux-policy. That could cause some issues</div><div><br></div><div>Devon J. Smith</div> </div></div></div> </div></body>
</html>