yum update failure for selinux-policy-targeted-3.1.2-1.fc9.noarch.rpm
 

Doing a 'yum udpdate' of today's Rawhide, I get a freeze at updating
selinux-policy-targeted.

Killing this (after about 30 minutes), and running 'rpm -Uvh --force
selinux-policy-targeted-3.1.2-1.fc9.noarch.rpm'), I get scads of
messages like the following:

libsepol.check_assertion_helper: assertion on line 0 violated by allow
unconfined_crond_t user_chkpwd_t:process { fork sigchld sigkill
sigstop signull signal ptrace getsched setsched getsession getpgid
setpgid getcap setcap share getattr setexec setfscreate noatsecure
siginh setrlimit rlimitinh setcurrent setkeycreate setsockcreate };
libsepol.check_assertion_helper: assertion on line 0 violated by allow
unconfined_crond_t calamaris_t:process { fork sigchld sigkill sigstop
signull signal ptrace getsched setsched getsession getpgid setpgid
getcap setcap share getattr setexec setfscreate noatsecure siginh
setrlimit rlimitinh setcurrent setkeycreate setsockcreate };
libsepol.check_assertion_helper: assertion on line 0 violated by allow
unconfined_crond_t mailman_queue_t:process { fork sigchld sigkill
sigstop signull signal ptrace getsched setsched getsession getpgid
setpgid getcap setcap share getattr setexec setfscreate noatsecure
siginh setrlimit rlimitinh setcurrent setkeycreate setsockcreate };
libsepol.check_assertion_helper: assertion on line 0 violated by allow
rpm_script_t unconfined_crond_t:process { sigchld };
libsepol.check_assertions: 426 assertion violations occured
libsemanage.semanage_expand_sandbox: Expand module failed
semodule: Failed!
[root@localhost packages]#


tom
--
Tom London

--
fedora-selinux-list mailing list
fedora-selinux-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

yum update failure for selinux-policy-targeted-3.1.2-1.fc9.noarch.rpm
 

Looks like selinux-policy-targeted-3.1.2-2.fc9.noarch.rpm fixes this.

Thanks!
tom

[root@localhost Downloads]# rpm -Uvh selinux*3.1.2-2*
Preparing... ########################################### [100%]
1:selinux-policy ########################################### [ 33%]
2:selinux-policy-devel ########################################### [ 67%]
3:selinux-policy-targeted########################################## # [100%]
libsepol.sepol_genbools_array: boolean allow_java_execstack no longer in policy
libsepol.sepol_genbools_array: boolean allow_mounton_anydir no longer in policy
libsepol.sepol_genbools_array: boolean allow_tftp_anon_write no longer in policy
libsepol.sepol_genbools_array: boolean allow_unconfined_exec_content
no longer in policy
libsepol.sepol_genbools_array: boolean allow_unlabeled_packets no
longer in policy
libsepol.sepol_genbools_array: boolean mail_read_content no longer in policy
[root@localhost Downloads]#


--
Tom London

--
fedora-selinux-list mailing list
fedora-selinux-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-selinux-list