Bug 1054460

Summary: SELinux prevents RPMs from installing
Product: [Fedora] Fedora Reporter: Fidel Leon <fidelleon>
Component: selinux-policyAssignee: Miroslav Grepl <mgrepl>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 20CC: dominick.grift, dwalsh, lvrabec, mgrepl
Target Milestone: ---   
Target Release: ---   
Hardware: i686   
OS: Linux   
Whiteboard:
Fixed In Version: selinux-policy-3.12.1-119.fc20 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-01-23 11:06:15 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Fidel Leon 2014-01-16 21:24:38 UTC 
Description of problem:

When installing packages from rpm (google-chrome-stable), yum (redhat-lsb) or dnf (spax), I'm getting many scriptlet errors in several packages, regardless of installation method. Related to SELinux since disabling it solves my problem.

Version-Release number of selected component (if applicable):

Fedora 20 fresh install from Network.

How reproducible:

# setenforce 0

and no errors installing anything.

# setenforce 1

and errors come again.


Steps to Reproduce:
1. yum install --downloadonly flash-plugin (or redhat-lsb)
2. setenforce 1
3. rpm -ihvv /var/.../flash-plugin...
D: adding "eb9fe89330c82f1d251ef4902293c1f948cd1917" to Sha1header index.
D: %post(flash-plugin-11.2.202.335-release.i386): scriptlet start
D: %post(flash-plugin-11.2.202.335-release.i386): execv(/bin/sh) pid 2119
D: %post(flash-plugin-11.2.202.335-release.i386): waitpid(2119) rc 2119 status 7f00
warning: %post(flash-plugin-11.2.202.335-release.i386) scriptlet failed, exit status 127
4. yum history rollback -1
rpm -e --noscripts flash-plugin (or affected packages, as yum doesn't remove them).
5. setenforce 0
6. rpm -ihvv flash-plugin.....
D: adding "eb9fe89330c82f1d251ef4902293c1f948cd1917" to Sha1header index.
D: %post(flash-plugin-11.2.202.335-release.i386): scriptlet start
D: %post(flash-plugin-11.2.202.335-release.i386): execv(/bin/sh) pid 2146
+ '[' 1 = 1 ']'
+ /usr/lib/flash-plugin/setup 32 install
+ '[' 1 = 2 ']'
+ ln -f -s /usr/share/icons/hicolor/48x48/apps/flash-player-properties.png /usr/share/pixmaps/
D: %post(flash-plugin-11.2.202.335-release.i386): waitpid(2146) rc 2146 status 0

Actual results:

warning: %post(flash-plugin-11.2.202.335-release.i386) scriptlet failed, exit status 127

Expected results:

Clean install!
Comment 1 Daniel Walsh 2014-01-16 21:42:31 UTC 
Fixed in selinux-policy-3.12.1-117.fc20


You need to do

setenforce 0
yum update selinux-policy --enablerepo=updates-testing
setenforce 1
Comment 2 Fidel Leon 2014-01-16 23:46:53 UTC 
Done, confirmed that selinux-policy-3.12.1-117.fc20 fixes everything (just did a massive package installation from Yumex and worked like a charm).
Comment 3 Fedora Update System 2014-01-20 22:09:52 UTC 
selinux-policy-3.12.1-119.fc20 has been submitted as an update for Fedora 20.
https://admin.fedoraproject.org/updates/selinux-policy-3.12.1-119.fc20
Comment 4 Fedora Update System 2014-01-22 03:07:47 UTC 
Package selinux-policy-3.12.1-119.fc20:
* should fix your issue,
* was pushed to the Fedora 20 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing selinux-policy-3.12.1-119.fc20'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2014-1249/selinux-policy-3.12.1-119.fc20
then log in and leave karma (feedback).
Comment 5 Fedora Update System 2014-01-23 11:06:15 UTC 
selinux-policy-3.12.1-119.fc20 has been pushed to the Fedora 20 stable repository.  If problems still persist, please make note of it in this bug report.