SELinux Troubleshooter messages from upgrade from F7->F8

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Michael Wiktowy wrote:
> On Nov 12, 2007 7:37 AM, Andy Green <andy at warmcat.com> wrote:
>> Somebody in the thread at some point said:
>>> Nov  9 02:39:19 localhost setroubleshoot:      SELinux is preventing
>>> /sbin/ldconfig (ldconfig_t) "write" to ldconfig (var_t).      For
>>> complete SELinux messages. run sealert -l
>>> 1594b6a8-1f16-44c9-b7ee-f5ef4621257f
>> I think this is a mislabelled /var/cache/ldconfig.  Check if yours is
>> like this
>>
>> # ll /var/cache/ldconfig -Zd
>> drwx------  root root system_u:object_r:ldconfig_cache_t /var/cache/ldconfig
>>
> 
> It matches this ... now ... I did not check right after the upgrade
> though. The selinux-policy package have been updated since then so it
> is possible that this could have been corrected already.
> 
> ...
> 
>>> Nov  9 03:09:42 localhost setroubleshoot: [rpc.ERROR] exception
>>> DBusException: org.freedesktop.DBus.Error.NoServer: Failed to connect
>>> to socket /var/run/dbus/system_bus_socket: Connection refused
>> Is dbus running?
>>
>> service messagebus status
> 
> dbus is running. I suspect that it had issues coming back up after
> getting updated as there were a lot of system_bus_socket: Connection
> refused messages scattered throughout the upgrade and they started
> shortly after dbus was updated. Now my /var/log/messages is pretty
> quiet so I think dbus is happy after the post-upgrade reboot.
> 
> Thank you for your comments.
> 
> /Mike
> 
I think that upgrade was happening out of order.  For example if
ldconfig upgraded before selinux policy, then you would see failures
like you saw above.  When the selinux policy package upgraded, it would
clean up the labeling.

I guess it would be advisable to upgrade selinux-policy before doing a
generate yum upgrade.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iD8DBQFHOx1urlYvE4MpobMRAq2AAKDC6huSETdo1jcroiYYXci0lJnsuwCffM0/
d0E52Wb2DYmLk24t/TVG3zQ=
=fx7+
-----END PGP SIGNATURE-----