selinux Multiple different specifications complaint

Daniel J Walsh dwalsh at redhat.com
Tue Oct 23 13:14:26 UTC 2007


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dave Burns wrote:
> Getting selinux warnings in stderr when I run rpm:
> 
>   rpm -Vv --noscripts mingetty >/dev/null
> /etc/selinux/strict/contexts/files/file_contexts: Multiple different
> specifications for /usr/bin/apt-get  (system_u:object_r:rpm_exec_t:s0
> and system_u:object_r:apt_exec_t:s0).
> /etc/selinux/strict/contexts/files/file_contexts: Multiple different
> specifications for /usr/bin/apt-shell
> (system_u:object_r:rpm_exec_t:s0 and system_u:object_r:apt_exec_t:s0).
> 
>  grep -e apt-get -e apt-shell /etc/selinux/strict/contexts/files/file_contexts
> /usr/bin/apt-get                --      system_u:object_r:apt_exec_t:s0
> # apt-shell is redhat specific
> /usr/bin/apt-shell              --      system_u:object_r:apt_exec_t:s0
> /usr/bin/apt-get                --      system_u:object_r:rpm_exec_t:s0
> /usr/bin/apt-shell              --      system_u:object_r:rpm_exec_t:s0
> 
>  ls /usr/bin/ap*
> /usr/bin/aplay      /usr/bin/apm      /usr/bin/apmsleep
> /usr/bin/apol      /usr/bin/apple_mv  /usr/bin/appletproxy
> /usr/bin/apr-1-config  /usr/bin/apu-1-config
> /usr/bin/aplaymidi  /usr/bin/apmount  /usr/bin/apogee_ppi
> /usr/bin/apple_cp  /usr/bin/apple_rm  /usr/bin/appres
> /usr/bin/apropos
> 
> 
> I am running fc5, did an autorelabel this morning. How did this stuff
> get in file_contexts? Should I just edit
> /etc/selinux/strict/contexts/files/file_contexts, and if so, which
> spec should I keep? Or should I delete both, apt is not even
> installed!
> 
> Mahalo!
> 
> Dave
> 
This means you have both the apt policy and the rpm policy installed at
the same time.  Both label the files differently.  Can you remove the
apt policy

semodule -r apt

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iD8DBQFHHfOyrlYvE4MpobMRAt0UAJ4toywrYqU7fnfwEE3OSGAZXGJkIwCgsX5X
FdY0U/IJ9z12ccLDdlfTnPE=
=208y
-----END PGP SIGNATURE-----




More information about the users mailing list