[Freeipa-devel] ipa-server-install error

[Jan Pazdziora]

On Fri, May 30, 2014 at 08:00:10AM +0200, Martin Kosek wrote:
> On 05/30/2014 06:14 AM, Dmitri Pal wrote:
> > On 05/29/2014 01:44 AM, James wrote:
> >> /usr/bin/runcon: invalid context: unconfined_u:system_r:pki_ca_script_t:s0:
> >> Invalid argument"
> > Looks like and AVC that lead to restart failure of the PKI instance that in
> > turn led to failure to configure CA.
> 
> I asked Ade Lee and got this response:
> 
> On 05/29/2014 04:44 PM, Ade Lee wrote:
> > The problem is here:
> >
> > /usr/bin/runcon: invalid context:
> > unconfined_u:system_r:pki_ca_script_t:s0: Invalid argument"
> >
> > We've seen this before.  Sometimes pki-selinux fails to load its policy
> > for some reason.  The best thing to do is to force re-install

Did you try to use %posttrans instead of %post?

https://bugzilla.redhat.com/show_bug.cgi?id=505066

-- 
Jan Pazdziora
Principal Software Engineer, Identity Management Engineering, Red Hat