rpmverify vs selinux problem
Emanuele Maiarelli
emanuele at nettirrena.it
Wed Jul 11 17:33:31 UTC 2007
i'm running rpmverify and it return the following output:
rpmverify -a|grep bin
........C /usr/share/locale/en_GB/LC_MESSAGES/kgreet_winbind.mo
........C /usr/share/locale/fi/LC_MESSAGES/kabcformat_binary.mo
........C /usr/share/locale/fi/LC_MESSAGES/kbinaryclock.mo
........C /usr/share/locale/fi/LC_MESSAGES/kgreet_winbind.mo
........C /usr/share/locale/ja/LC_MESSAGES/kabcformat_binary.mo
........C /usr/share/locale/ja/LC_MESSAGES/kbinaryclock.mo
........C /usr/share/locale/ja/LC_MESSAGES/kgreet_winbind.mo
........C /usr/share/locale/sk/LC_MESSAGES/kabcformat_binary.mo
........C /usr/share/locale/sk/LC_MESSAGES/kbinaryclock.mo
........C /usr/share/locale/sk/LC_MESSAGES/kgreet_winbind.mo
........C /usr/bin/firefox
........C /usr/lib/firefox-1.0.7/components/libinspector.so
........C /usr/lib/firefox-1.0.7/firefox-bin
........C /usr/lib/firefox-1.0.7/libgtkxtbin.so
........C /usr/lib/firefox-1.0.7/res/html/gopher-binary.gif
........C /usr/bin/viewfax
........C /usr/sbin/openldap/back_sql-2.2.so.7
........C /usr/sbin/openldap/back_sql-2.2.so.7.0.22
........C /usr/sbin/openldap/back_sql.la
........C /usr/bin/amstex
........C /usr/bin/bamstex
........C /usr/bin/bplain
........C /usr/bin/lambda
It means "C selinux Context differs".
Considering the /etc/sysconfig/selinux
------------ /etc/sysconfig/selinux ------------
# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
# enforcing - SELinux security policy is enforced.
# permissive - SELinux prints warnings instead of enforcing.
# disabled - SELinux is fully disabled.
SELINUX=permissive
# SELINUXTYPE= type of policy in use. Possible values are:
# targeted - Only targeted network daemons are protected.
# strict - Full SELinux protection.
SELINUXTYPE=targeted
------------------------------------------------
Can this be caused by the SELINUXTYPE=targeted?
i've tried
'touch /.autorelabel' and reboot
'fixfiles -Ra> restore'
'fixfiles relabel'
but this doesn't solve the problem.
any hints?
Thanks in advice,
PS: i have already post the problem on fedora-security-list
(
https://www.redhat.com/archives/fedora-security-list/2007-July/thread.html
thread 'rpmverify output')
they helped me and finally suggested to post it on fedora-selinux-list :)
More information about the fedora-selinux-list
mailing list