libselinux should not require libsetrans

Daniel J Walsh dwalsh at
Wed Sep 14 18:21:03 UTC 2005

Stephen Smalley wrote:

>In the current Fedora spec file, libselinux has libsetrans as a prereq,
>thereby pulling it in on libselinux updates for all users regardless of
>policy.  However, libsetrans presumes that MCS is enabled and always
>appends :s0 to contexts when converting to raw format if they lack it.
>This breaks (for example) a system running strict policy, as libselinux
>then starts using the MCS-specific libsetrans and it starts
>appending :so to raw contexts, but the kernel then rejects those
>contexts since it does not have a MLS-enabled policy.
>libsetrans is supposed to be optional, with libselinux gracefully
>falling back to no translation if it is absent.  I can possibly see
>making it a dependency of MCS-enabled targeted policy packages, but not
>of libselinux.  Yes?
Yes for now you can just disable the translation.    Edit /etc/mcs.conf 
and unconmment disable line.  MCS Targeted policy will be available by 
default in tonights rawhide.


More information about the fedora-selinux-list mailing list