f10 vs selinux again.

Gene Heskett gene.heskett at verizon.net
Sun Mar 1 16:54:53 UTC 2009


On Sunday 01 March 2009, Dominick Grift wrote:
>On Sat, 2009-02-28 at 19:39 -0500, Gene Heskett wrote:
>> On Saturday 28 February 2009, Dominick Grift wrote:
>> >On Sat, 2009-02-28 at 18:18 -0500, Gene Heskett wrote:
>> >
>> >You could try:
>> >rpm -Uvh --replacefiles --replacepkgs selinux-policy and
>> >selinux-policy-targeted then make sure your base.pp is fresh (try
>> >semodule -B)
>>
>> Ok, did that, no problem with the selinux-policy rpm from the dvd, but
>> when I do the same with selinux-policy- targeted, I'm right back to square
>> one:
>>
>> [root at coyote Packages]# rpm -Uvh --replacefiles --replacepkgs
>> selinux-policy-targeted-3.5.13-18.fc10.noarch.rpm Preparing...            
>>    ########################################### [100%]
>> 1:selinux-policy-targeted###########################################
>> [100%] libsepol.print_missing_requirements: pki's global requirements were
>> not met: type/attribute pki_kra_port_t libsemanage.semanage_link_sandbox:
>> Link packages failed
>> semodule:  Failed!
>>
>> A somewhat different error message that might be a bit more enlightening
>> to someone who actually knows what it means, but its swahili to me. :)
>>
>> So, should I nuke the contents of /etc/selinux/* and repeat the rpm
>> commands?
>>
>> Your turn, Coach. :)
>
>You can get the latest packages from koji.fedoraproject.org/koji or your
>local fedora mirror.
>
>The error above looks like a bug in policy.
>
>Make sure that if you install the latest selinux policy for f10 from
>koji, that you install both: selinux-policy as well as
>selinux-policy-targeted.

I found late yesterday that the updates repo in my yum-repos.d was disabled. 
Enabling that & pulling in several hundred more updates, I have not seen 
another alert since I installed those updated ones.  No idea where they came 
from, just some yum mirror I have to assume lacking more info.

Maybe we can lay this one to rest, and I can go back to "enforcing" since its 
permissive due to a miss-spelling of enforcing in the config.  Sorry for the 
noise, my apologies.


-- 
Cheers, Gene
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Everything should be made as simple as possible, but not simpler.
		-- Albert Einstein




More information about the fedora-selinux-list mailing list