[gentoo-hardened] Migration problems

[gentoo-hardened] Migration problems

[Darren Grant]

Heya

I'm trying to migrate my system over to selinux using the gentoo 
handbook for selinux migration. I'm following the initial preperations 
page and so, changed my profile, ensured I had the latest kernel headers 
and then emerged glibc.

After doing so, I'm not trying to emerge hardened-sources but my emerge 
seems to be broken.

Exhibit A:

# emerge hardened-sources
Calculating dependencies ...done!
 >>> emerge (1 of 1) sys-kernel/hardened-sources-2.6.14-r5 to /
 >>> Downloading 
ftp://ftp.ucsb.edu/pub/mirrors/linux/gentoo/distfiles/hardened-patches-2.6.14-5.extras.tar.bz2
Traceback (most recent call last):
  File "/usr/bin/emerge", line 3228, in ?
    mydepgraph.merge(pkglist)
  File "/usr/bin/emerge", line 1912, in merge
    
retval=portage.doebuild(y,"merge",myroot,self.pkgsettings,edebug,tree="porttree")
  File "/usr/lib/portage/pym/portage.py", line 2704, in doebuild
    if mydo!="manifest" and not fetch(fetchme, mysettings, 
listonly=listonly, fetchonly=fetchonly):
  File "/usr/lib/portage/pym/portage.py", line 1914, in fetch
    con=selinux.getcontext()
AttributeError: 'module' object has no attribute 'getcontext'

In fact I can't emerge anything. Anyone please able to help me out and 
let me know what I've done wrong? Should I not be using this document 
for a 2005.1 install system?

-- 
gentoo-hardened@gentoo.org mailing list

Re: [gentoo-hardened] Migration problems

[Michael]

I think your python is broken... Something is broken and since emerge
needs it there is no easy way to get it working again. The easiest is if
someone can provide the needed package as a tgz/tbz2 which you can
then extract to / to have emerge working again, after which you can
remerge the package that stopped working. My guess is it's python,
but I'm not 100% sure.
Good luck,

Michael

Darren Grant wrote:

> Heya
>
> I'm trying to migrate my system over to selinux using the gentoo 
> handbook for selinux migration. I'm following the initial preperations 
> page and so, changed my profile, ensured I had the latest kernel 
> headers and then emerged glibc.
>
> After doing so, I'm not trying to emerge hardened-sources but my 
> emerge seems to be broken.
>
> Exhibit A:
>
> # emerge hardened-sources
> Calculating dependencies ...done!
> >>> emerge (1 of 1) sys-kernel/hardened-sources-2.6.14-r5 to /
> >>> Downloading 
> ftp://ftp.ucsb.edu/pub/mirrors/linux/gentoo/distfiles/hardened-patches-2.6.14-5.extras.tar.bz2 
>
> Traceback (most recent call last):
>  File "/usr/bin/emerge", line 3228, in ?
>    mydepgraph.merge(pkglist)
>  File "/usr/bin/emerge", line 1912, in merge
>    
> retval=portage.doebuild(y,"merge",myroot,self.pkgsettings,edebug,tree="porttree") 
>
>  File "/usr/lib/portage/pym/portage.py", line 2704, in doebuild
>    if mydo!="manifest" and not fetch(fetchme, mysettings, 
> listonly=listonly, fetchonly=fetchonly):
>  File "/usr/lib/portage/pym/portage.py", line 1914, in fetch
>    con=selinux.getcontext()
> AttributeError: 'module' object has no attribute 'getcontext'
>
> In fact I can't emerge anything. Anyone please able to help me out and 
> let me know what I've done wrong? Should I not be using this document 
> for a 2005.1 install system?
>

-- 
gentoo-hardened@gentoo.org mailing list

Re: [gentoo-hardened] Migration problems

[Darren Grant]

If I remove my profile link and point it back to a regular default-linux 
profile, emerge works again perfectly...

To prepare for the selinux migration, I did the following:
# rm -f /etc/make.profile
# ln -sf /usr/portage/profiles/selinux/2005.1/amd64 /etc/make.profile

Checked that my headers were up-to-date (remerged glibc) and proceeded 
to try and use emerge which failed with the error I posted.

By reversing the process and removing the make.profile and linking it 
back to /usr/portage/profiles/default-linux/amd64... emerge works again.

Michael wrote:

> I think your python is broken... Something is broken and since emerge
> needs it there is no easy way to get it working again. The easiest is if
> someone can provide the needed package as a tgz/tbz2 which you can
> then extract to / to have emerge working again, after which you can
> remerge the package that stopped working. My guess is it's python,
> but I'm not 100% sure.
> Good luck,
>
> Michael
>
> Darren Grant wrote:
>
>> Heya
>>
>> I'm trying to migrate my system over to selinux using the gentoo 
>> handbook for selinux migration. I'm following the initial 
>> preperations page and so, changed my profile, ensured I had the 
>> latest kernel headers and then emerged glibc.
>>
>> After doing so, I'm not trying to emerge hardened-sources but my 
>> emerge seems to be broken.
>>
>> Exhibit A:
>>
>> # emerge hardened-sources
>> Calculating dependencies ...done!
>> >>> emerge (1 of 1) sys-kernel/hardened-sources-2.6.14-r5 to /
>> >>> Downloading 
>> ftp://ftp.ucsb.edu/pub/mirrors/linux/gentoo/distfiles/hardened-patches-2.6.14-5.extras.tar.bz2 
>>
>> Traceback (most recent call last):
>>  File "/usr/bin/emerge", line 3228, in ?
>>    mydepgraph.merge(pkglist)
>>  File "/usr/bin/emerge", line 1912, in merge
>>    
>> retval=portage.doebuild(y,"merge",myroot,self.pkgsettings,edebug,tree="porttree") 
>>
>>  File "/usr/lib/portage/pym/portage.py", line 2704, in doebuild
>>    if mydo!="manifest" and not fetch(fetchme, mysettings, 
>> listonly=listonly, fetchonly=fetchonly):
>>  File "/usr/lib/portage/pym/portage.py", line 1914, in fetch
>>    con=selinux.getcontext()
>> AttributeError: 'module' object has no attribute 'getcontext'
>>
>> In fact I can't emerge anything. Anyone please able to help me out 
>> and let me know what I've done wrong? Should I not be using this 
>> document for a 2005.1 install system?
>>
>
-- 
gentoo-hardened@gentoo.org mailing list

Re: [gentoo-hardened] Migration problems

[Chris PeBenito]

[-- Attachment #1: Type: text/plain, Size: 1332 bytes --]

On Sat, 2006-02-04 at 14:38 -0800, Darren Grant wrote:
> # emerge hardened-sources
> Calculating dependencies ...done!
>  >>> emerge (1 of 1) sys-kernel/hardened-sources-2.6.14-r5 to /
>  >>> Downloading 
> ftp://ftp.ucsb.edu/pub/mirrors/linux/gentoo/distfiles/hardened-patches-2.6.14-5.extras.tar.bz2
> Traceback (most recent call last):
>   File "/usr/bin/emerge", line 3228, in ?
>     mydepgraph.merge(pkglist)
>   File "/usr/bin/emerge", line 1912, in merge
>     
> retval=portage.doebuild(y,"merge",myroot,self.pkgsettings,edebug,tree="porttree")
>   File "/usr/lib/portage/pym/portage.py", line 2704, in doebuild
>     if mydo!="manifest" and not fetch(fetchme, mysettings, 
> listonly=listonly, fetchonly=fetchonly):
>   File "/usr/lib/portage/pym/portage.py", line 1914, in fetch
>     con=selinux.getcontext()
> AttributeError: 'module' object has no attribute 'getcontext'

Make sure you have python-selinux-2.16.  Its the highest stable version,
so I'm not sure why you wouldn't have it, but just to make sure I
removed all the older versions.

-- 
Chris PeBenito
<pebenito@gentoo.org>
Developer,
Hardened Gentoo Linux
Embedded Gentoo Linux
 
Public Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE6AF9243
Key fingerprint = B0E6 877A 883F A57A 8E6A  CB00 BC8E E42D E6AF 9243


[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-hardened] Migration problems

[Darren Grant]

That did the trick!

Thanks... appreciate it.

So is moving to selinux worth it? I'm setting up a small web/email 
server... (apache2,postfix,courier-imap,etc...)

Chris PeBenito wrote:

>On Sat, 2006-02-04 at 14:38 -0800, Darren Grant wrote:
>  
>
>># emerge hardened-sources
>>Calculating dependencies ...done!
>> >>> emerge (1 of 1) sys-kernel/hardened-sources-2.6.14-r5 to /
>> >>> Downloading 
>>ftp://ftp.ucsb.edu/pub/mirrors/linux/gentoo/distfiles/hardened-patches-2.6.14-5.extras.tar.bz2
>>Traceback (most recent call last):
>>  File "/usr/bin/emerge", line 3228, in ?
>>    mydepgraph.merge(pkglist)
>>  File "/usr/bin/emerge", line 1912, in merge
>>    
>>retval=portage.doebuild(y,"merge",myroot,self.pkgsettings,edebug,tree="porttree")
>>  File "/usr/lib/portage/pym/portage.py", line 2704, in doebuild
>>    if mydo!="manifest" and not fetch(fetchme, mysettings, 
>>listonly=listonly, fetchonly=fetchonly):
>>  File "/usr/lib/portage/pym/portage.py", line 1914, in fetch
>>    con=selinux.getcontext()
>>AttributeError: 'module' object has no attribute 'getcontext'
>>    
>>
>
>Make sure you have python-selinux-2.16.  Its the highest stable version,
>so I'm not sure why you wouldn't have it, but just to make sure I
>removed all the older versions.
>
>  
>
-- 
gentoo-hardened@gentoo.org mailing list