relabel fails

[Vadym Chepkov]

Hi,

I am trying to enable SELinux on a server where it was disabled before, but the
autorelabel process fails. I have set SELinux in permissive mode and  when I try to use
fixfiles to do it manually I get these errors:

# fixfiles restore
/etc/selinux/targeted/contexts/files/file_contexts.homedirs:  line 19 has invalid context
user_u:object_r:user_mozilla_home_t:s0
/etc/selinux/targeted/contexts/files/file_contexts.homedirs:  line 20 has invalid context
user_u:object_r:user_mozilla_home_t:s0
/etc/selinux/targeted/contexts/files/file_contexts.homedirs:  line 21 has invalid context
user_u:object_r:user_mozilla_home_t:s0
/etc/selinux/targeted/contexts/files/file_contexts.homedirs:  line 22 has invalid context
user_u:object_r:user_mozilla_home_t:s0
/etc/selinux/targeted/contexts/files/file_contexts.homedirs:  line 24 has invalid context
user_u:object_r:user_mozilla_home_t:s0
/etc/selinux/targeted/contexts/files/file_contexts.homedirs:  line 44 has invalid context
root:object_r:user_mozilla_home_t:s0
/etc/selinux/targeted/contexts/files/file_contexts.homedirs:  line 45 has invalid context
root:object_r:user_mozilla_home_t:s0
/etc/selinux/targeted/contexts/files/file_contexts.homedirs:  line 46 has invalid context
root:object_r:user_mozilla_home_t:s0
/etc/selinux/targeted/contexts/files/file_contexts.homedirs:  line 47 has invalid context
root:object_r:user_mozilla_home_t:s0
Exiting after 10 errors.

selinux-policy-targeted-2.4.6-255.el5_4.4

Thanks

Sincerely yours,
  Vadym Chepkov

[Richard Chapman]

Here is a link I should have put in my earlier reply:
https://bugzilla.redhat.com/show_bug.cgi?id=449420

If you problem is the same as mine - then this should describe it - and 
the solution..

Richard.

Vadym Chepkov wrote:
>  Hi,
>
>  I am trying to enable SELinux on a server where it was disabled before, but the
> autorelabel process fails. I have set SELinux in permissive mode and  when I try to use
> fixfiles to do it manually I get these errors:
>
>  # fixfiles restore
>  /etc/selinux/targeted/contexts/files/file_contexts.homedirs:  line 19 has invalid context
> user_u:object_r:user_mozilla_home_t:s0
>  /etc/selinux/targeted/contexts/files/file_contexts.homedirs:  line 20 has invalid context
> user_u:object_r:user_mozilla_home_t:s0
>  /etc/selinux/targeted/contexts/files/file_contexts.homedirs:  line 21 has invalid context
> user_u:object_r:user_mozilla_home_t:s0
>  /etc/selinux/targeted/contexts/files/file_contexts.homedirs:  line 22 has invalid context
> user_u:object_r:user_mozilla_home_t:s0
>  /etc/selinux/targeted/contexts/files/file_contexts.homedirs:  line 24 has invalid context
> user_u:object_r:user_mozilla_home_t:s0
>  /etc/selinux/targeted/contexts/files/file_contexts.homedirs:  line 44 has invalid context
> root:object_r:user_mozilla_home_t:s0
>  /etc/selinux/targeted/contexts/files/file_contexts.homedirs:  line 45 has invalid context
> root:object_r:user_mozilla_home_t:s0
>  /etc/selinux/targeted/contexts/files/file_contexts.homedirs:  line 46 has invalid context
> root:object_r:user_mozilla_home_t:s0
>  /etc/selinux/targeted/contexts/files/file_contexts.homedirs:  line 47 has invalid context
> root:object_r:user_mozilla_home_t:s0
>  Exiting after 10 errors.
>
>  selinux-policy-targeted-2.4.6-255.el5_4.4
>
>  Thanks
>
>  Sincerely yours,
>    Vadym Chepkov
>  --
>  selinux mailing list
>  selinux(a)lists.fedoraproject.org
>  https://admin.fedoraproject.org/mailman/listinfo/selinux
>
>

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 04/10/2010 08:14 AM, Vadym Chepkov wrote:
>  Hi,
>  
>  I am trying to enable SELinux on a server where it was disabled before, but the
> autorelabel process fails. I have set SELinux in permissive mode and  when I try to use
> fixfiles to do it manually I get these errors:
>  
>  # fixfiles restore
>  /etc/selinux/targeted/contexts/files/file_contexts.homedirs:  line 19 has invalid context
> user_u:object_r:user_mozilla_home_t:s0
>  /etc/selinux/targeted/contexts/files/file_contexts.homedirs:  line 20 has invalid context
> user_u:object_r:user_mozilla_home_t:s0
>  /etc/selinux/targeted/contexts/files/file_contexts.homedirs:  line 21 has invalid context
> user_u:object_r:user_mozilla_home_t:s0
>  /etc/selinux/targeted/contexts/files/file_contexts.homedirs:  line 22 has invalid context
> user_u:object_r:user_mozilla_home_t:s0
>  /etc/selinux/targeted/contexts/files/file_contexts.homedirs:  line 24 has invalid context
> user_u:object_r:user_mozilla_home_t:s0
>  /etc/selinux/targeted/contexts/files/file_contexts.homedirs:  line 44 has invalid context
> root:object_r:user_mozilla_home_t:s0
>  /etc/selinux/targeted/contexts/files/file_contexts.homedirs:  line 45 has invalid context
> root:object_r:user_mozilla_home_t:s0
>  /etc/selinux/targeted/contexts/files/file_contexts.homedirs:  line 46 has invalid context
> root:object_r:user_mozilla_home_t:s0
>  /etc/selinux/targeted/contexts/files/file_contexts.homedirs:  line 47 has invalid context
> root:object_r:user_mozilla_home_t:s0
>  Exiting after 10 errors.
>  
>  selinux-policy-targeted-2.4.6-255.el5_4.4
>  
>  Thanks
>  
>  Sincerely yours,
>    Vadym Chepkov
>  --
>  selinux mailing list
>  selinux(a)lists.fedoraproject.org
>  https://admin.fedoraproject.org/mailman/listinfo/selinux
>  
>   
Can you execute genhomedircon  And see if this cleans up the problem
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.14 (GNU/Linux)
> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAkvBrzgACgkQrlYvE4MpobNCOACdEULUGXPGI5yYOerI8qWqOa0U
> tuUAoK9SvuAs0ngOGJM1u39BCvdS/uxm
> =bcdQ
> -----END PGP SIGNATURE-----

[Vadym Chepkov]

--- On Sun, 4/11/10, Daniel J Walsh <dwalsh(a)redhat.com&gt; wrote:

>  Can you execute genhomedircon  And see if this cleans
>  up the problem 
I finally did 'yum reinstall selinux-policy selinux-policy-targeted' and it
cleared the issue, even though genhomedircon is not in the scripts.

Bu the way this code in the rc.sysinit masks the issue
 /sbin/fixfiles restore > /dev/null 2>&1 
 rm -f  /.autorelabel 

it assume fixfiles will always be successful and it sure is not the case.

Vadym