[gentoo-user] SELinux change from 2005.1 to 2006.1 policy update fails

[gentoo-user] SELinux change from 2005.1 to 2006.1 policy update fails

[Konstantinos Agouros]

Hi,

I tried upgrading from the 2005.1 to the 2006.1 profile. Updating
selinux-base-policy-20070329 fails with the following message:

>>> Setting SELinux security labels
/etc/selinux/targeted/contexts/files/file_contexts: No such file or directory

!!! ERROR: sec-policy/selinux-base-policy-20070329 failed.
Call stack:
  misc-functions.sh, line 570:   Called preinst_selinux_labels
  misc-functions.sh, line 492:   Called die

!!! Failed to set SELinux security labels.
!!! If you need support, post the topmost build error, and the call stack if relevant.

Is there some manual stuff I need to do before this upgrade works?

/etc/make.profile points to /usr/portage/profiles/selinux/x86/2006.1

Regards,

Konstantin

-- 
Dipl-Inf. Konstantin Agouros aka Elwood Blues. Internet: elwood@agouros.de
Otkerstr. 28, 81547 Muenchen, Germany. Tel +49 89 69370185
----------------------------------------------------------------------------
"Captain, this ship will not survive the forming of the cosmos." B'Elana Torres
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] SELinux change from 2005.1 to 2006.1 policy update fails

[Mick]

[-- Attachment #1: Type: text/plain, Size: 660 bytes --]

On Sunday 17 June 2007 12:22, Konstantinos Agouros wrote:
> Hi,
>
> I tried upgrading from the 2005.1 to the 2006.1 profile. Updating
>
> selinux-base-policy-20070329 fails with the following message:
> >>> Setting SELinux security labels
>
> /etc/selinux/targeted/contexts/files/file_contexts: No such file or
> directory

What is listed under /etc/selinux/targeted/contexts/files/ ?

If the file is there then can you check that you are not emerging this while 
using FEATURES="userpriv" in your make.conf.

If the above does not help, you could ask for more informed advice in the irc 
channel for gentoo kernel devs.
-- 
Regards,
Mick

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-user] SELinux change from 2005.1 to 2006.1 policy update fails

[Konstantinos Agouros]

In <200706180838.05681.michaelkintzios@gmail.com> michaelkintzios@gmail.com (Mick) writes:

>--nextPart13142306.RAMmR4N7DJ
>Content-Type: text/plain;
>  charset="utf-8"
>Content-Transfer-Encoding: quoted-printable
>Content-Disposition: inline

>On Sunday 17 June 2007 12:22, Konstantinos Agouros wrote:
>> Hi,
>>
>> I tried upgrading from the 2005.1 to the 2006.1 profile. Updating
>>
>> selinux-base-policy-20070329 fails with the following message:
>> >>> Setting SELinux security labels
>>
>> /etc/selinux/targeted/contexts/files/file_contexts: No such file or
>> directory

>What is listed under /etc/selinux/targeted/contexts/files/ ?
/etc/selinux is empty. 

When I started with hardened sources this was all put to /etc/security/selinux
so it seems I need some kind of migration script or is a simple
softlink good enough?

Regards,

Konstantin

>If the file is there then can you check that you are not emerging this whil=
>e=20
>using FEATURES=3D"userpriv" in your make.conf.

>If the above does not help, you could ask for more informed advice in the i=
>rc=20
>channel for gentoo kernel devs.
>=2D-=20
>Regards,
>Mick

>--nextPart13142306.RAMmR4N7DJ
>Content-Type: application/pgp-signature

>-----BEGIN PGP SIGNATURE-----
>Version: GnuPG v1.4.7 (GNU/Linux)

>iD8DBQBGdjZd5Fp0QerLYPcRAnnUAJ9StOt71YoZczDDSVTn/2Pa9aioAQCgza7X
>QK+IF6Ew9FbqHMSjO2oEO8c=
>=nQVs
>-----END PGP SIGNATURE-----

>--nextPart13142306.RAMmR4N7DJ--
>-- 
>gentoo-user@gentoo.org mailing list

-- 
Dipl-Inf. Konstantin Agouros aka Elwood Blues. Internet: elwood@agouros.de
Otkerstr. 28, 81547 Muenchen, Germany. Tel +49 89 69370185
----------------------------------------------------------------------------
"Captain, this ship will not survive the forming of the cosmos." B'Elana Torres
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] SELinux change from 2005.1 to 2006.1 policy update fails

[Mick]

[-- Attachment #1: Type: text/plain, Size: 1306 bytes --]

On Monday 18 June 2007 20:38, Konstantinos Agouros wrote:
> In <200706180838.05681.michaelkintzios@gmail.com> michaelkintzios@gmail.com 
(Mick) writes:

> >On Sunday 17 June 2007 12:22, Konstantinos Agouros wrote:
> >> Hi,
> >>
> >> I tried upgrading from the 2005.1 to the 2006.1 profile. Updating
> >>
> >> selinux-base-policy-20070329 fails with the following message:
> >> >>> Setting SELinux security labels
> >> /etc/selinux/targeted/contexts/files/file_contexts: No such file or
> >> directory
> >
> >What is listed under /etc/selinux/targeted/contexts/files/ ?
>
> /etc/selinux is empty.
>
> When I started with hardened sources this was all put to
> /etc/security/selinux so it seems I need some kind of migration script or
> is a simple
> softlink good enough?

Sorry Konstantin, last time I used SELinux for a very short time was more than 
three years ago . . . I've forgotten most of it since then and things most 
likely have moved on.  Perhaps someone more versed in SELinux could help 
here?
>
> >If the file is there then can you check that you are not emerging this
> > whil= e=20
> >using FEATURES=3D"userpriv" in your make.conf.

Aargh!  Why was my previous message received like so "whil= e=20"? What email 
client are you using?
-- 
Regards,
Mick

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-user] SELinux change from 2005.1 to 2006.1 policy update fails

[Konstantinos Agouros]

In <200706191845.39612.michaelkintzios@gmail.com> michaelkintzios@gmail.com (Mick) writes:

>--nextPart1695717.Xy3eqH9OGj
>Content-Type: text/plain;
>  charset="utf-8"
>Content-Transfer-Encoding: quoted-printable
>Content-Disposition: inline

>On Monday 18 June 2007 20:38, Konstantinos Agouros wrote:
>> In <200706180838.05681.michaelkintzios@gmail.com> michaelkintzios@gmail.c=
>om=20
>(Mick) writes:

>> >On Sunday 17 June 2007 12:22, Konstantinos Agouros wrote:
>> >> Hi,
>> >>
>> >> I tried upgrading from the 2005.1 to the 2006.1 profile. Updating
>> >>
>> >> selinux-base-policy-20070329 fails with the following message:
>> >> >>> Setting SELinux security labels
>> >> /etc/selinux/targeted/contexts/files/file_contexts: No such file or
>> >> directory
>> >
>> >What is listed under /etc/selinux/targeted/contexts/files/ ?
>>
>> /etc/selinux is empty.
>>
>> When I started with hardened sources this was all put to
>> /etc/security/selinux so it seems I need some kind of migration script or
>> is a simple
>> softlink good enough?

>Sorry Konstantin, last time I used SELinux for a very short time was more t=
>han=20
>three years ago . . . I've forgotten most of it since then and things most=
>=20
>likely have moved on.  Perhaps someone more versed in SELinux could help=20
>here?
>>
>> >If the file is there then can you check that you are not emerging this
>> > whil=3D e=3D20
>> >using FEATURES=3D3D"userpriv" in your make.conf.

>Aargh!  Why was my previous message received like so "whil=3D e=3D20"? What=
> email=20
>client are you using?
I have the mailinglist transferred to a local news server and use good old
nn as newsreader, which does not seem to cope well with utf-8 as transfer
encoding \:)

Cheers,

Konstantin
>=2D-=20
>Regards,
>Mick

>--nextPart1695717.Xy3eqH9OGj
>Content-Type: application/pgp-signature

>-----BEGIN PGP SIGNATURE-----
>Version: GnuPG v1.4.7 (GNU/Linux)

>iD8DBQBGeBZD5Fp0QerLYPcRAqFfAJ9YDDvz8jCwv1m7ZyjlQKC0mg37MwCeIGEl
>nCbzxef2UoZKpXXTj15z+Xo=
>=tjIP
>-----END PGP SIGNATURE-----

>--nextPart1695717.Xy3eqH9OGj--
>-- 
>gentoo-user@gentoo.org mailing list

-- 
Dipl-Inf. Konstantin Agouros aka Elwood Blues. Internet: elwood@agouros.de
Otkerstr. 28, 81547 Muenchen, Germany. Tel +49 89 69370185
----------------------------------------------------------------------------
"Captain, this ship will not survive the forming of the cosmos." B'Elana Torres
-- 
gentoo-user@gentoo.org mailing list