rpmverify vs selinux problem

Emanuele Maiarelli emanuele at nettirrena.it
Wed Jul 11 17:33:31 UTC 2007


i'm running rpmverify and it  return the following output:

  rpmverify -a|grep bin

........C   /usr/share/locale/en_GB/LC_MESSAGES/kgreet_winbind.mo
........C   /usr/share/locale/fi/LC_MESSAGES/kabcformat_binary.mo
........C   /usr/share/locale/fi/LC_MESSAGES/kbinaryclock.mo
........C   /usr/share/locale/fi/LC_MESSAGES/kgreet_winbind.mo
........C   /usr/share/locale/ja/LC_MESSAGES/kabcformat_binary.mo
........C   /usr/share/locale/ja/LC_MESSAGES/kbinaryclock.mo
........C   /usr/share/locale/ja/LC_MESSAGES/kgreet_winbind.mo
........C   /usr/share/locale/sk/LC_MESSAGES/kabcformat_binary.mo
........C   /usr/share/locale/sk/LC_MESSAGES/kbinaryclock.mo
........C   /usr/share/locale/sk/LC_MESSAGES/kgreet_winbind.mo
........C   /usr/bin/firefox
........C   /usr/lib/firefox-1.0.7/components/libinspector.so
........C   /usr/lib/firefox-1.0.7/firefox-bin
........C   /usr/lib/firefox-1.0.7/libgtkxtbin.so
........C   /usr/lib/firefox-1.0.7/res/html/gopher-binary.gif
........C   /usr/bin/viewfax
........C   /usr/sbin/openldap/back_sql-2.2.so.7
........C   /usr/sbin/openldap/back_sql-2.2.so.7.0.22
........C   /usr/sbin/openldap/back_sql.la
........C   /usr/bin/amstex
........C   /usr/bin/bamstex
........C   /usr/bin/bplain
........C   /usr/bin/lambda

It means "C selinux Context differs".

Considering the /etc/sysconfig/selinux
------------ /etc/sysconfig/selinux ------------
# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
#       enforcing - SELinux security policy is enforced.
#       permissive - SELinux prints warnings instead of enforcing.
#       disabled - SELinux is fully disabled.
SELINUX=permissive
# SELINUXTYPE= type of policy in use. Possible values are:
#       targeted - Only targeted network daemons are protected.
#       strict - Full SELinux protection.
SELINUXTYPE=targeted
------------------------------------------------

Can this be caused by the SELINUXTYPE=targeted?

i've tried
'touch /.autorelabel' and reboot
'fixfiles -Ra> restore'
'fixfiles relabel'

but this doesn't solve the problem.

any hints?

Thanks in advice,

PS: i have already post the problem on fedora-security-list
 (
https://www.redhat.com/archives/fedora-security-list/2007-July/thread.html
thread 'rpmverify output')
  they helped me and finally suggested to post it on fedora-selinux-list :)





More information about the fedora-selinux-list mailing list