ps not showing contexts?

Michael Thomas wart at kobold.org
Mon Aug 27 18:52:00 UTC 2007


Daniel J Walsh wrote:
> Wart wrote:
>> Wart wrote:
>> [...]
>>> Still no luck.  I restored the machine to a previously working state, and
>>> then upgraded both procps and *selinux*.  Immediately after the
>>> upgrade ps
>>> stopped showing contexts again.
>>>
>>> [...] Updated: libselinux.i386 0:2.0.31-2.fc8 libselinux-python.i386
>>> 0:2.0.31-2.fc8 selinux-policy.noarch 0:3.0.6-3.fc8
>>> selinux-policy-devel.noarch 0:3.0.6-3.fc8
>>> selinux-policy-targeted.noarch 0:3.0.6-3.fc8 Dependency Updated:
>>> libsemanage.i386 0:2.0.4-1.fc8
>>> libsepol.i386 0:2.0.7-1.fc8 policycoreutils.i386 0:2.0.25-2.fc8
>>> policycoreutils-gui.i386 0:2.0.25-2.fc8 Complete! [root at localhost ~]# ps
>>> auwxZ | head LABEL                           USER       PID %CPU %MEM
>>> VSZ   RSS TTY  STAT START   TIME COMMAND -
>>> root         1  0.0  0.1   2108   624 ? Ss   02:30   0:02 init [5] -
>>> root         2  0.0  0.0      0     0 ? S<   02:30   0:00 [kthreadd] -
>>> root         3  0.0  0.0      0     0 ? S<   02:30   0:00 [migration/0] -
>>> root         4  0.0  0.0      0     0 ? S<   02:30   0:00 [ksoftirqd/0] -
>>> root         5  0.0  0.0      0     0 ? S<   02:30   0:00 [watchdog/0] -
>>> root         6  0.0  0.0      0     0 ? S<   02:30   0:00 [events/0] -
>>> root         7  0.0  0.0      0     0 ? S<   02:30   0:00 [khelper] -
>>> root        58  0.0  0.0      0     0 ? S<   02:30   0:00 [kblockd/0] -
>>> root        61  0.0  0.0      0     0 ? S<   02:30   0:00 [kacpid]
>>> [root at localhost ~]# rpm -q selinux-policy selinux-policy-3.0.6-3.fc8
>>> [root at localhost ~]# rpm -q procps procps-3.2.7-15.1.fc8
>>>
>>> When I get some time I'll start with a fresh F-7 install and then upgrade
>>> to rawhide.  Maybe some intermediate update broke things beyond repair.
>> I think I found the problem.
> 
>> 'ps' tries to find and open 'libselinux.so'.  At some point this library
>> was
>> moved from libselinux to libselinux-devel.  Since I didn't have
>> libselinux-devel installed, ps failed to load the library and find the
>> selinux
>> context information.
> 
>> Installing libselinux-devel fixes the problem.
> 
>> I see three possible ways to fix this:
> 
>> 1) Move libselinux.so back to libselinux
>> 2) Add 'Requires: libselinux-devel' to procps
>> 3) Fix ps to load libselinux.so.1 instead of the unversioned .so file.
> 
>> --Wart
> I will move it back to libselinux package.

The procps owner is also going to change ps to load libselinux.so.1 (BZ#
255441)

Both of these changes should make it far less likely to be a problem again.

Thanks,

--Wart




More information about the fedora-selinux-list mailing list