Latest selinux-policy and selinux-policy-targeted update breaks RPM scriptlets execution

[Josh Boyer]

On Fri, Jan 17, 2014 at 7:29 AM, Rubin <rubin at xs4all.nl> wrote:
> Hi Fedora,
>
> Just a quick note that the latest selinux-policy and
> selinux-policy-targeted breaks RPM scriptlet execution (pre, post,
> postun, etc).
>
> I've verified this on two separate systems (my laptop, a desktop at
> work). The versions causing this is:
>
> 0:3.12.1-116.fc20 (for both packages)
>
> This is pretty serious in that it affects future updates (ie. after
> installing these two, all future updates/installs of RPM packages will
> either fail completely (verified with yum install pidgin) or fail in
> subtler ways (yum remove gnome-tweak-tool, see %postun fail with exit
> code 127)).
>
> Note that I verified that this does not happen with the previous version
> of selinux-policy and selinux-policy-targeted that I have (3.12.1-106.fc20).

There's an update in updates-testing that fixes this.  If you have
installed -106, you need to set SELinux to permissive before
installing the fixed packages.

https://bugzilla.redhat.com/show_bug.cgi?id=1054350

https://admin.fedoraproject.org/updates/FEDORA-2014-0870/selinux-policy-3.12.1-117.fc20

josh