On Tue, 2008-02-05 at 10:47 -0500, Stephen Smalley wrote:
On Tue, 2008-02-05 at 16:37 +0100, "Stanisław T. Findeisen"
wrote:
> Look I tried to intall awstats-6.6-1.fc7.noarch.rpm from Fedora release
> on Fedora 7 64-bit and got segmentation fault in semanage I think.
>
> First I tried this:
>
> [root@srv-1 download]# rpm --install ./awstats-6.6-1.fc7.noarch.rpm
> /var/tmp/rpm-tmp.71040: line 12: 3964 Segmentation fault semanage
> fcontext -a -t httpd_sys_script_exec_t
> '/usr/share/awstats/wwwroot/cgi-bin(/.*)?' 2> /dev/null
> /var/tmp/rpm-tmp.71040: line 13: 3965 Segmentation fault semanage
> fcontext -a -t httpd_sys_script_rw_t '/var/lib/awstats(/.*)?' 2>
/dev/null
>
> Then I realised I have HTTP server on, so I thought I will turn it off
> and try again (on the way I had to erase the RPM because it was
> considered "installed").
>
> Then this happened:
>
> [root@srv-1 download]# rpm --install ./awstats-6.6-1.fc7.noarch.rpm
> /var/tmp/rpm-tmp.21042: line 12: 3995 Segmentation fault semanage
> fcontext -a -t httpd_sys_script_exec_t
> '/usr/share/awstats/wwwroot/cgi-bin(/.*)?' 2> /dev/null
> /var/tmp/rpm-tmp.21042: line 13: 3996 Segmentation fault semanage
> fcontext -a -t httpd_sys_script_rw_t '/var/lib/awstats(/.*)?' 2>
/dev/null
>
> I do not know what /var/tmp/rpm-tmp.* is, but I suppose that is an RPM
> install script or something which comes with RPM (right?). After these 2
> steps the /var/tmp directory was empty so I couldn't examine that file.
>
> After that I downloaded awstats-6.7-2.fc7.noarch.rpm from Fedora updates
> and it installed fine (although I haven't tested it yet).
>
> I have also found this in /var/log/messages:
>
> Feb 5 15:53:44 srv-1 kernel: semanage[3964]: segfault at
> 0000000000000000 rip 00002b610d7e9b49 rsp 00007fffa20be6b0 error 4
> Feb 5 15:53:44 srv-1 kernel: semanage[3965]: segfault at
> 0000000000000000 rip 00002b2754535b49 rsp 00007fff5b3744b0 error 4
> Feb 5 15:56:33 srv-1 kernel: semanage[3995]: segfault at
> 0000000000000000 rip 00002b0a226c9b49 rsp 00007fff8d1e0300 error 4
> Feb 5 15:56:33 srv-1 kernel: semanage[3996]: segfault at
> 0000000000000000 rip 00002b0feea21b49 rsp 00007fffc0e86fc0 error 4
>
> What do you think guys?
Bugzilla it, please, against policycoreutils. Please include your
versions of libsepol, libsemanage, and policycoreutils.
Also, can you reproduce it by hand now? i.e. running semanage with
those arguments from the command line.
--
Stephen Smalley
National Security Agency