Problem after installing selinux-policy-targeted-1.27.1-2.1.noarch.rpm

[Daniel J Walsh]

Matthew Saltzman wrote:

> I ran up2date to get selinux-policy-targeted-1.27.1-2.1.noarch.rpm. 
> up2date hung for a very long time at the end of the installation, so 
> finally, I killed it.  At that point, I had two versions of 
> selinux-policy-targeted installed.  Verifying each showed that all the 
> files were correct for the new version.  But just to be safe (oops), I 
> deleted both and tried to reinstall
> selinux-policy-targeted-1.27.1-2.1.noarch.rpm.
>
> Running up2date now produces:
>
>   # up2date
>   Could not set exec context to root:sysadm_r:rpm_t.

I am updating the policy to put this role back in.  Will 
/usr/sbin/up2date work?

>
> and fails to run.  After setenforce 0, I still get the message and 
> up2date runs.
>
> Forcing a reinstall of selinux-policy-targeted-1.27.1-2.1.noarch.rpm 
> has no effect.  Rebooting has no effect.  Relabeling on reboot has no 
> effect.
> (Actually, after relabeling, rpm --verify produces
>
>   # rpm --verify selinux-policy-targeted
>   S.5....T.   /etc/selinux/targeted/contexts/files/file_contexts.homedirs
> )
>
> So far, other things appear to work normally, but up2date does not work.
>
> How can I fix this?
>
> Thanks.
>
> Messages in audit.log are:
>
> type=USER_AUTH msg=audit(1127508331.874:1624469): user pid=3328 uid=0 
> auid=4294967295 msg='PAM authentication: user=root 
> exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? 
> result=Success)'
> type=USER_ACCT msg=audit(1127508331.874:1624478): user pid=3328 uid=0 
> auid=4294967295 msg='PAM accounting: user=root 
> exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? 
> result=Success)'
> type=USER_START msg=audit(1127508331.884:1626823): user pid=3328 uid=0 
> auid=4294967295 msg='PAM session open: user=root 
> exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? 
> result=Success)'
> type=USER_END msg=audit(1127508331.901:1627077): user pid=3328 uid=0 
> auid=4294967295 msg='PAM session close: user=root 
> exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? 
> result=Success)'
>


--