ps not showing contexts?

Wart wart at kobold.org
Sun Aug 26 17:39:35 UTC 2007


Wart wrote:
[...]
> Still no luck.  I restored the machine to a previously working state, and
> then upgraded both procps and *selinux*.  Immediately after the upgrade ps
> stopped showing contexts again.
> 
> [...] Updated: libselinux.i386 0:2.0.31-2.fc8 libselinux-python.i386 
> 0:2.0.31-2.fc8 selinux-policy.noarch 0:3.0.6-3.fc8 
> selinux-policy-devel.noarch 0:3.0.6-3.fc8 selinux-policy-targeted.noarch 
> 0:3.0.6-3.fc8 Dependency Updated: libsemanage.i386 0:2.0.4-1.fc8
> libsepol.i386 0:2.0.7-1.fc8 policycoreutils.i386 0:2.0.25-2.fc8 
> policycoreutils-gui.i386 0:2.0.25-2.fc8 Complete! [root at localhost ~]# ps
> auwxZ | head LABEL                           USER       PID %CPU %MEM
> VSZ   RSS TTY  STAT START   TIME COMMAND -
> root         1  0.0  0.1   2108   624 ? Ss   02:30   0:02 init [5] -
> root         2  0.0  0.0      0     0 ? S<   02:30   0:00 [kthreadd] -
> root         3  0.0  0.0      0     0 ? S<   02:30   0:00 [migration/0] -
> root         4  0.0  0.0      0     0 ? S<   02:30   0:00 [ksoftirqd/0] -
> root         5  0.0  0.0      0     0 ? S<   02:30   0:00 [watchdog/0] -
> root         6  0.0  0.0      0     0 ? S<   02:30   0:00 [events/0] -
> root         7  0.0  0.0      0     0 ? S<   02:30   0:00 [khelper] -
> root        58  0.0  0.0      0     0 ? S<   02:30   0:00 [kblockd/0] -
> root        61  0.0  0.0      0     0 ? S<   02:30   0:00 [kacpid] 
> [root at localhost ~]# rpm -q selinux-policy selinux-policy-3.0.6-3.fc8 
> [root at localhost ~]# rpm -q procps procps-3.2.7-15.1.fc8
> 
> When I get some time I'll start with a fresh F-7 install and then upgrade
> to rawhide.  Maybe some intermediate update broke things beyond repair.

I think I found the problem.

'ps' tries to find and open 'libselinux.so'.  At some point this library was
moved from libselinux to libselinux-devel.  Since I didn't have
libselinux-devel installed, ps failed to load the library and find the selinux
context information.

Installing libselinux-devel fixes the problem.

I see three possible ways to fix this:

1) Move libselinux.so back to libselinux
2) Add 'Requires: libselinux-devel' to procps
3) Fix ps to load libselinux.so.1 instead of the unversioned .so file.

--Wart




More information about the fedora-selinux-list mailing list