ps not showing contexts?
Michael Thomas
wart at kobold.org
Mon Aug 27 18:52:00 UTC 2007
Daniel J Walsh wrote:
> Wart wrote:
>> Wart wrote:
>> [...]
>>> Still no luck. I restored the machine to a previously working state, and
>>> then upgraded both procps and *selinux*. Immediately after the
>>> upgrade ps
>>> stopped showing contexts again.
>>>
>>> [...] Updated: libselinux.i386 0:2.0.31-2.fc8 libselinux-python.i386
>>> 0:2.0.31-2.fc8 selinux-policy.noarch 0:3.0.6-3.fc8
>>> selinux-policy-devel.noarch 0:3.0.6-3.fc8
>>> selinux-policy-targeted.noarch 0:3.0.6-3.fc8 Dependency Updated:
>>> libsemanage.i386 0:2.0.4-1.fc8
>>> libsepol.i386 0:2.0.7-1.fc8 policycoreutils.i386 0:2.0.25-2.fc8
>>> policycoreutils-gui.i386 0:2.0.25-2.fc8 Complete! [root at localhost ~]# ps
>>> auwxZ | head LABEL USER PID %CPU %MEM
>>> VSZ RSS TTY STAT START TIME COMMAND -
>>> root 1 0.0 0.1 2108 624 ? Ss 02:30 0:02 init [5] -
>>> root 2 0.0 0.0 0 0 ? S< 02:30 0:00 [kthreadd] -
>>> root 3 0.0 0.0 0 0 ? S< 02:30 0:00 [migration/0] -
>>> root 4 0.0 0.0 0 0 ? S< 02:30 0:00 [ksoftirqd/0] -
>>> root 5 0.0 0.0 0 0 ? S< 02:30 0:00 [watchdog/0] -
>>> root 6 0.0 0.0 0 0 ? S< 02:30 0:00 [events/0] -
>>> root 7 0.0 0.0 0 0 ? S< 02:30 0:00 [khelper] -
>>> root 58 0.0 0.0 0 0 ? S< 02:30 0:00 [kblockd/0] -
>>> root 61 0.0 0.0 0 0 ? S< 02:30 0:00 [kacpid]
>>> [root at localhost ~]# rpm -q selinux-policy selinux-policy-3.0.6-3.fc8
>>> [root at localhost ~]# rpm -q procps procps-3.2.7-15.1.fc8
>>>
>>> When I get some time I'll start with a fresh F-7 install and then upgrade
>>> to rawhide. Maybe some intermediate update broke things beyond repair.
>> I think I found the problem.
>
>> 'ps' tries to find and open 'libselinux.so'. At some point this library
>> was
>> moved from libselinux to libselinux-devel. Since I didn't have
>> libselinux-devel installed, ps failed to load the library and find the
>> selinux
>> context information.
>
>> Installing libselinux-devel fixes the problem.
>
>> I see three possible ways to fix this:
>
>> 1) Move libselinux.so back to libselinux
>> 2) Add 'Requires: libselinux-devel' to procps
>> 3) Fix ps to load libselinux.so.1 instead of the unversioned .so file.
>
>> --Wart
> I will move it back to libselinux package.
The procps owner is also going to change ps to load libselinux.so.1 (BZ#
255441)
Both of these changes should make it far less likely to be a problem again.
Thanks,
--Wart
More information about the fedora-selinux-list
mailing list