reinstall package on Atomic host

[arnaud gaboury]

I run Fedora atomic 29. I made a mistake by removing one very important
SELinux module: su.

I can no more su (I can sudo), which is very annoying. To get back the
module, I need to reinstall the selinux-policy-targeted  package.

------------------------------------------
% sudo setenforce 0
% sudo rpm-ostree uninstall selinux-policy-targeted
error:package/capability 'selinux-policy-targeted' isnot currently requested
% rpm -qa | grep selinux
.....
182:selinux-policy-targeted-3.....
-------------------------
Following this[0] thread, I tried:
----------------------------
 % sudo rpm-ostree override remove selinux-policy-targeted
[sudo] password for gabx:
Checking out tree cb40a05... done
Resolving dependencies... done
Applying 1 override and 79 overlays
Processing packages... done
Running pre scripts... done
Running post scripts... done
Writing rpmdb... done
Writing OSTree commit... done
error: With policy root '/proc/self/fd/25/usr/etc/selinux/targeted':
selabel_open(SELABEL_CTX_FILE): No such file or directory
-----------------------------------

How can I delete/install or reinstall it? Is there a way to get back the su
module?

Thank you for help

[0]https://github.com/projectatomic/rpm-ostree/issues/1386

[stan]

On Fri, 30 Aug 2019 00:22:11 +0200
arnaud gaboury  wrote:
> I run Fedora atomic 29. I made a mistake by removing one very
> important SELinux module: su.
>
> I can no more su (I can sudo), which is very annoying. To get back the
> module, I need to reinstall the selinux-policy-targeted  package.

[snip]
> How can I delete/install or reinstall it? Is there a way to get back
> the su module?

I don't know rpm-ostree, but is there a reinistall command like dnf or
an force install option like rpm?  Or maybe a distrosync to bring the
install into alignment with latest packages?

[arnaud gaboury]

No idea why, but the su module is back. BUT, as written in my last post (a
few mn ago), I can run sudo but not su.
There is no reinstall on rpm-ostree. It is a more complexe method. Even
removing is not trivial

---------------------------------------------------
# ls -alZ /usr/share/selinux/targeted/default/active/modules/100/su
total 24K
drwx------.   2 root root system_u:object_r:usr_t:s0   33 Jan  1  1970 ./
drwx------. 419 root root system_u:object_r:usr_t:s0  12K Jan  1  1970 ../
-rw-------.   3 root root system_u:object_r:usr_t:s0 1.9K Jan  1  1970 cil
-rw-------. 835 root root system_u:object_r:usr_t:s0    3 Jan  1  1970
lang_ext
------------------------------------------------------------------------

On Fri, Aug 30, 2019 at 4:23 AM stan via users <
[e-mail]> wrote:
> On Fri, 30 Aug 2019 00:22:11 +0200
> arnaud gaboury  wrote:
> > I run Fedora atomic 29. I made a mistake by removing one very
> > important SELinux module: su.
> >
> > I can no more su (I can sudo), which is very annoying. To get back the
> > module, I need to reinstall the selinux-policy-targeted  package.
>
> [snip]
> > How can I delete/install or reinstall it? Is there a way to get back
> > the su module?
>
> I don't know rpm-ostree, but is there a reinistall command like dnf or
> an force install option like rpm?  Or maybe a distrosync to bring the
> install into alignment with latest packages?
> _______________________________________________
> users mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedoraproject.org/archives/list/[e-mail]