problems after updating selinux-policy-targeted

[Paul Howarth]

On Wed, 2005-06-29 at 12:37 -0400, Daniel J Walsh wrote:
> Arthur Pemberton wrote:
> 
> > Martín Marqués wrote:
> >
> >> After the update I wasn't able to login through ssh. Restarted sshd 
> >> and everything started working OK.
> >>
> >> Now I have this problem when login in with KDE (from the X console). 
> >> I restarted KDM (killall -HUP X) but it didn't work.
> >>
> >> These are the error logs I get:
> >>
> >> Jun 29 10:30:08 mail kernel: audit(1120051808.126:0): avc:  denied  { 
> >> execmod } for  pid=2952 comm=prefdm path=/lib/libdl-2.3.5.so dev=hda1 
> >> ino=50817 scontext=user_u:system_r:unconfined_t 
> >> tcontext=root:object_r:lib_t tclass=file
> >> Jun 29 10:30:09 mail kernel: audit(1120051809.938:0): avc:  denied  { 
> >> execmod } for  pid=2995 comm=prefdm path=/lib/libdl-2.3.5.so dev=hda1 
> >> ino=50817 scontext=user_u:system_r:unconfined_t 
> >> tcontext=root:object_r:lib_t tclass=file
> >> Jun 29 10:30:11 mail kernel: audit(1120051811.282:0): avc:  denied  { 
> >> execmod } for  pid=3044 comm=prefdm path=/lib/libdl-2.3.5.so dev=hda1 
> >> ino=50817 scontext=user_u:system_r:unconfined_t 
> >> tcontext=root:object_r:lib_t tclass=file
> >> Jun 29 10:30:12 mail kernel: audit(1120051811.670:0): avc:  denied  { 
> >> execmod } for  pid=3099 comm=prefdm path=/lib/libdl-2.3.5.so dev=hda1 
> >> ino=50817 scontext=user_u:system_r:unconfined_t 
> >> tcontext=root:object_r:lib_t tclass=file
> >> Jun 29 10:30:13 mail kernel: audit(1120051813.903:0): avc:  denied  { 
> >> execmod } for  pid=3143 comm=prefdm path=/lib/libdl-2.3.5.so dev=hda1 
> >> ino=50817 scontext=user_u:system_r:unconfined_t 
> >> tcontext=root:object_r:lib_t tclass=file
> >> Jun 29 10:30:14 mail kernel: audit(1120051814.889:0): avc:  denied  { 
> >> execmod } for  pid=3194 comm=prefdm path=/lib/libdl-2.3.5.so dev=hda1 
> >> ino=50817 scontext=user_u:system_r:unconfined_t 
> >> tcontext=root:object_r:lib_t tclass=file
> >> Jun 29 10:30:16 mail kernel: audit(1120051816.129:0): avc:  denied  { 
> >> execmod } for  pid=3238 comm=prefdm path=/lib/libdl-2.3.5.so dev=hda1 
> >> ino=50817 scontext=user_u:system_r:unconfined_t 
> >> tcontext=root:object_r:lib_t tclass=file
> >> Jun 29 10:30:17 mail kernel: audit(1120051817.941:0): avc:  denied  { 
> >> execmod } for  pid=3282 comm=prefdm path=/lib/libdl-2.3.5.so dev=hda1 
> >> ino=50817 scontext=user_u:system_r:unconfined_t 
> >> tcontext=root:object_r:lib_t tclass=file
> >> Jun 29 10:30:18 mail kernel: audit(1120051818.943:0): avc:  denied  { 
> >> execmod } for  pid=3327 comm=prefdm path=/lib/libdl-2.3.5.so dev=hda1 
> >> ino=50817 scontext=user_u:system_r:unconfined_t 
> >> tcontext=root:object_r:lib_t tclass=file
> >> Jun 29 10:30:20 mail kernel: audit(1120051820.651:0): avc:  denied  { 
> >> execmod } for  pid=3373 comm=prefdm path=/lib/libdl-2.3.5.so dev=hda1 
> >> ino=50817 scontext=user_u:system_r:unconfined_t 
> >> tcontext=root:object_r:lib_t tclass=file
> >> Jun 29 10:30:21 mail init: Id "x" respawning too fast: disabled for 5 
> >> minutes
> >>
> >>
> >>  
> >>
> > Sorry dude, but join the club, best bet is to downgrade to the 
> > previous version, and put an except in your yum.conf so yum won't 
> > upgrade it again.
> >
> Please update to 
> ftp://people.redhat.com/dwalsh/SELinux/Fedora/selinux-policy-targeted-*1.17.30-3.15.noarch.rpm.
> 
> This is tomorrows upgrade.

I don't see those files there.

Do you mean? 
ftp://people.redhat.com/dwalsh/SELinux/FC3/selinux-policy-targeted-1.17.30-3.16.noarch.rpm
ftp://people.redhat.com/dwalsh/SELinux/FC3/selinux-policy-targeted-sources-1.17.30-3.16.noarch.rpm

Or using yum:

configure Daniel's repo:

/etc/yum.repos.d/dwselinux.repo:

[dwselinux]
name=Daniel Walsh's Fedora Core $releasever SELinux repo (i386)
baseurl=ftp://people.redhat.com/dwalsh/SELinux/FC$releasever
enabled=0
gpgcheck=0

# yum --enablerepo=dwselinux update selinux\*

I did this (FC3) and now gpg is working again :-)

Paul.
-- 
Paul Howarth <paul at city-fan.org>