policycoreutils-2.0.85-30.2 breaks sandbox

[Christoph A.]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi,

the latest testing update in fc14 breaks sandbox on my machine:

 Updated: policycoreutils-2.0.85-30.2.fc14.x86_64
 Updated: policycoreutils-python-2.0.85-30.2.fc14.x86_64
 Updated: policycoreutils-sandbox-2.0.85-30.2.fc14.x86_64


sandbox -X evince
/usr/sbin/seunshare: invalid option -- 'k'
USAGE: seunshare [ -v ] [ -c ] -C -t tmpdir -h homedir [-Z context] --
executable [args]



yum downgrade policycoreutils

Resolving Dependencies
- --> Running transaction check
- ---> Package policycoreutils.x86_64 0:2.0.85-28.fc14 set to be downgraded
- ---> Package policycoreutils.x86_64 0:2.0.85-30.2.fc14 set to be erased
- --> Finished Dependency Resolution
Error: Package: policycoreutils-python-2.0.85-30.2.fc14.x86_64
(@updates-testing)
           Requires: policycoreutils = 2.0.85-30.2.fc14
           Removing: policycoreutils-2.0.85-30.2.fc14.x86_64
(@updates-testing)
               policycoreutils = 2.0.85-30.2.fc14
           Downgraded By: policycoreutils-2.0.85-28.fc14.x86_64 (updates)
               policycoreutils = 2.0.85-28.fc14
           Available: policycoreutils-2.0.83-28.fc14.x86_64 (fedora)
               policycoreutils = 2.0.83-28.fc14
 You could try using --skip-broken to work around the problem
 You could try running: rpm -Va --nofiles --nodigest

> -----BEGIN PGP SIGNATURE-----
>
> iEYEAREKAAYFAk4r86MACgkQrq+riTAIEg0DIwCg57Sz17JxUEmd7vrdyd6DcnIy
> g+UAniy8NoYaEKZOEqsoa05TXVlwQ1H4
> =z4D8
> -----END PGP SIGNATURE-----

[Christoph A.]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

>  yum downgrade policycoreutils
>  
>  Resolving Dependencies
>  --> Running transaction check
>  ---> Package policycoreutils.x86_64 0:2.0.85-28.fc14 set to be downgraded
>  ---> Package policycoreutils.x86_64 0:2.0.85-30.2.fc14 set to be erased
>  --> Finished Dependency Resolution
>  Error: Package: policycoreutils-python-2.0.85-30.2.fc14.x86_64
>  (@updates-testing)
>             Requires: policycoreutils = 2.0.85-30.2.fc14
>             Removing: policycoreutils-2.0.85-30.2.fc14.x86_64
>  (@updates-testing)
>                 policycoreutils = 2.0.85-30.2.fc14
>             Downgraded By: policycoreutils-2.0.85-28.fc14.x86_64 (updates)
>                 policycoreutils = 2.0.85-28.fc14
>             Available: policycoreutils-2.0.83-28.fc14.x86_64 (fedora)
>                 policycoreutils = 2.0.83-28.fc14
>   You could try using --skip-broken to work around the problem
>   You could try running: rpm -Va --nofiles --nodigest 

better:
yum downgrade policycoreutils  policycoreutils-python
policycoreutils-sandbox

sandbox works again.
> -----BEGIN PGP SIGNATURE-----
>
> iEYEAREKAAYFAk4r9PQACgkQrq+riTAIEg1PjQCfS1wm5MWQ1K2HpD9Y1NcJY2yg
> uccAoOhZbk/vRV2cYf9Coc8aqQbwwQtD
> =lvlZ
> -----END PGP SIGNATURE-----

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 07/24/2011 06:33 AM, Christoph A. wrote:
> > yum downgrade policycoreutils
>  
> > Resolving Dependencies --> Running transaction check ---> Package
> > policycoreutils.x86_64 0:2.0.85-28.fc14 set to be downgraded --->
> > Package policycoreutils.x86_64 0:2.0.85-30.2.fc14 set to be erased 
> > --> Finished Dependency Resolution Error: Package:
> > policycoreutils-python-2.0.85-30.2.fc14.x86_64 (@updates-testing) 
> > Requires: policycoreutils = 2.0.85-30.2.fc14 Removing:
> > policycoreutils-2.0.85-30.2.fc14.x86_64 (@updates-testing) 
> > policycoreutils = 2.0.85-30.2.fc14 Downgraded By:
> > policycoreutils-2.0.85-28.fc14.x86_64 (updates) policycoreutils =
> > 2.0.85-28.fc14 Available: policycoreutils-2.0.83-28.fc14.x86_64
> > (fedora) policycoreutils = 2.0.83-28.fc14 You could try using
> > --skip-broken to work around the problem You could try running: rpm
> > -Va --nofiles --nodigest
>  
>  
>  better: yum downgrade policycoreutils  policycoreutils-python 
>  policycoreutils-sandbox
>  
>  sandbox works again. -- selinux mailing list 
>  selinux(a)lists.fedoraproject.org 
>  https://admin.fedoraproject.org/mailman/listinfo/selinux 
Shoot, I have pulled the update.  Can you just remove the -k lines from
/usr/bin/sandbox and see if all the processes die on sandbox exit.
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.11 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAk4tho8ACgkQrlYvE4MpobM1QgCfUNE4zh2Is2L3rR5YCIivGxIu
> PrkAn1p8GSfgiv6Q+4wq4X6nRmVxiwgs
> =20rn
> -----END PGP SIGNATURE-----

[Christoph A.]

I downgraded already and 30.2 is not in the repo anymore.

While running policycoreutils-2.0.85-30.1 I saw that it fixes two other 
bugs, but I'm not sure if this is just a coincidence:
- #711420
- and another probably unreported bug: a firefox sandbox with permanent 
homedir died every 2th time it was executed immediately after starting

Now I'm again on policycoreutils-2.0.85-28.fc14.x86_64 and having these 
problems again..
looking forward to see 30.3 or 31 :)

thanks,
Christoph