FC6 selinux-policy-targeted

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Riku Seppälä wrote:
> Daniel J Walsh wrote:
> Riku Seppälä wrote:
>  
>>>> Daniel J Walsh wrote:
>>>>    
>>>>> -----BEGIN PGP SIGNED MESSAGE-----
>>>>> Hash: SHA1
>>>>>
>>>>> Riku Seppälä wrote:
>>>>>  
>>>>>      
>>>>>> Just did yum update on my FC6 machine.
>>>>>>
>>>>>> Updating  : selinux-policy-targeted      #######################
>>>>>> [12/56]
>>>>>> libsepol.context_from_record: type httpd_nagios_script_exec_t is not
>>>>>> defined
>>>>>> libsepol.context_from_record: could not create context structure
>>>>>> libsepol.context_from_string: could not create context structure
>>>>>> libsepol.sepol_context_to_sid: could not convert
>>>>>> system_u:object_r:httpd_nagios_script_exec_t:s0 to sid
>>>>>> /etc/selinux/targeted/contexts/files/file_contexts:  line 270 has
>>>>>> invalid context system_u:object_r:httpd_nagios_script_exec_t:s0
>>>>>> libsemanage.semanage_install_active: setfiles returned error code 1.
>>>>>> semodule:  Failed!
>>>>>>
>>>>>>
>>>>>> Should I worry? :)
>>>>>>
>>>>>>
>>>>>> Riku
>>>>>>
>>>>>>             
>>>>> Which policy version?
>>>>>         
>>>> selinux-policy-targeted.noarch 2.4.6-88.fc6
>>>>
>>>>     
> Try 2.4.6-94.fc6.
>>

> Updating  : selinux-policy-targeted      ######################### [2/4]
> /etc/selinux/targeted/contexts/files/file_contexts: Multiple same
> specifications for /usr/lib/vlc/codec/libdmo_plugin.so.
> /etc/selinux/targeted/contexts/files/file_contexts: Multiple same
> specifications for /usr/lib/vlc/codec/librealaudio_plugin.so.
> /sbin/restorecon reset /etc/asound.state context
> system_u:object_r:etc_runtime_t:s0->system_u:object_r:etc_t:s0
>  Cleanup   : selinux-policy-targeted      ######################### [3/4]

> I've seen that "Multiple same specifications..." line several times
> while updating and never really cared what it really means, but I don't
> remember ever seeing that
> /sbin/restorecon reset /etc/asound.state context
> system_u:object_r:etc_runtime_t:s0->system_u:object_r:etc_t:s0 line before.

> Riku

multiple same specs are probably caused by some rpm adding file context
for librealaudio.

semanage fcontext -d /usr/lib/vlc/codec/librealaudio_plugin.so
semanage fcontext -d /usr/lib/vlc/codec/libdmo_plugin.so

Will probably remove them.


The restorecon line found /etc/asound.state labeled etc_runtime_t and
expected it to be labeled etc_t, so it relabeled.  Anytime you update
the selinux policy package, it looks at the old file_context file and
the new and then runs restorecon on the files/directories that have changed.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iD8DBQFHAcL9rlYvE4MpobMRAvARAJ9bI92VMEupzpfVLN1BScOjoX/OAACg5cDP
pM4fyMe23P4uxouxBEa2YV8=
=E+hH
-----END PGP SIGNATURE-----