Bug 139155

Summary: system-config-securitylevel dialog does not show up
Product: [Fedora] Fedora Reporter: Peeter Puusemp <peeter.as>
Component: system-config-securitylevelAssignee: Paul Nasrat <nobody+pnasrat>
Status: CLOSED CURRENTRELEASE QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: 3CC: bigmonk, dbasinge, deerfieldtech, dwalsh, gczarcinski, linhardt, lurp, matmott, michael, mike, nixuser, scottu
Target Milestone: ---   
Target Release: ---   
Hardware: i386   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2004-11-29 21:56:58 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
Patch to selinuxPage.py in system-config-security package none

Description Peeter Puusemp 2004-11-13 10:40:51 UTC
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.5)
Gecko/20041111 Firefox/1.0

Description of problem:
Whenever I try to open Security Level dialog from the menu the dialog
does not show up after entering the root password.

If to try to open the dialog in the command line with root access then
there is such output:

[root@localhost peeter]# system-config-securitylevel
Traceback (most recent call last):
  File
"/usr/share/system-config-securitylevel/system-config-securitylevel.py",
line 18, in ?
    app.stand_alone()
  File "/usr/share/system-config-securitylevel/securitylevel.py", line
427, in stand_alone
    self.selinuxPage = selinuxPage.selinuxPage()
  File "/usr/share/system-config-securitylevel/selinuxPage.py", line
329, in __init__
    self.refreshTunables(self.initialtype)
  File "/usr/share/system-config-securitylevel/selinuxPage.py", line
427, in refreshTunables
    self.loadBooleans()
  File "/usr/share/system-config-securitylevel/selinuxPage.py", line
418, in loadBooleans
    on=rec[3]=="1"
IndexError: list index out of range
[root@localhost peeter]#

After the installation of Fedora Core 3 it worked perfectly - it means
the dialog showed up. This bug started to happen after some upgrades
released today (12.Nov 2004). All earlier updates and upgrades had
been done before todays upgrade with the command #yum upgrade.

I have to mention that yesterday evening I removed many packages I
don't need with Add/Remove Applications. Some packages I removed from
command line like emacs and xemacs, but I don't remember that I had
removed important dependencies.

Version-Release number of selected component (if applicable):
system-config-securitylevel-1.4.14-1

How reproducible:
Always

Steps to Reproduce:
1. Remove quite many packages with the help of Add/Remove Applications
and #yum remove. Actually this isn't reproduceable as I did, because I
cannot list things I removed. You may skip it.
2. Use yum command #yum upgrade in the terminal that should do
upgrades released on 12.Nov 2004
3. Open Security Level dialog in Gnome main menu
    

Actual Results:  Nothing, system-config-securitylevel dialog does not
show up.

Expected Results:  system-config-securitylevel dialog should have
popped up.

Additional info:

Comment 1 Bruno Hertz 2004-11-13 11:36:21 UTC
Just FYI, the same error occurs here on my system with all updates
installed, i.e. besides other packages
system-config-securitylevel-1.4.14-1

Comment 2 The Grayven 2004-11-13 13:15:52 UTC
This is due to a change in the getsebool tool.
As a bypass, you could downgrade libselinux from version 1.19.1-3 to
1.17.14-1.

Comment 3 Mark Broadbent 2004-11-13 17:25:49 UTC
Created attachment 106642 [details]
Patch to selinuxPage.py in system-config-security package

The attached patch will correct the problematic file in the latest FC3 version.

Comment 5 Paul Nasrat 2004-11-13 18:37:59 UTC
*** Bug 139166 has been marked as a duplicate of this bug. ***

Comment 6 Daniel Walsh 2004-11-13 18:54:51 UTC
system-config-securitylevel-1.4.17-1  Should fix this problem.



Comment 7 Daniel Walsh 2004-11-13 19:11:47 UTC
Make that system-config-securitylevel-1.4.18-1

Comment 8 Gene Czarcinski 2004-11-14 17:48:09 UTC
Is this one of those situations where the update will be pushed to
rawhide (development) and not put out as an Update?

This package does not work in FC3 and this should be issued as an
Update (just my opinion).

Comment 9 Daniel Walsh 2004-11-14 20:02:38 UTC
It will be coming out as an update.

Dan

Comment 10 Gene Czarcinski 2004-11-14 20:07:48 UTC
Thank you.

Comment 11 Paul Nasrat 2004-11-15 13:53:53 UTC
*** Bug 139202 has been marked as a duplicate of this bug. ***

Comment 12 Paul Nasrat 2004-11-15 16:32:49 UTC
*** Bug 139366 has been marked as a duplicate of this bug. ***

Comment 13 Paul Nasrat 2004-11-16 15:58:16 UTC
*** Bug 139525 has been marked as a duplicate of this bug. ***

Comment 14 Paul Nasrat 2004-11-17 20:27:49 UTC
*** Bug 139737 has been marked as a duplicate of this bug. ***

Comment 17 Ian Laurie 2004-11-18 10:21:09 UTC
Just playing with system-config-securitylevel-1.4.18-2 from testing,
there seems to be a few problems:

It is trying to access "getenforce" in /usr/sbin whereas on my FC3 it
is in /usr/bin.  A symbolic link can fix that of course.

But worse, according to the doc:

  http://fedora.redhat.com/docs/selinux-apache-fc3/index.html

you are supposed to be able to access a bunch of httpd booleans and
also enable/disable httpd protection, yet none of this shown up in the
window.


Comment 18 Daniel Walsh 2004-11-18 15:06:19 UTC
You need to update your version of libselinux.

Dan

Comment 19 Ian Laurie 2004-11-19 07:15:36 UTC
OK, but the testing directory:

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/testing/3/i386/

Which is where I got system-config-securitylevel-1.4.18-2 currently
has no libselinux package, so I downloaded one from the development
directory:

http://download.fedora.redhat.com/pub/fedora/linux/core/development/i386/Fedora/RPMS/

Seems to be working fine so far.


Comment 20 Daniel Walsh 2004-11-19 18:41:07 UTC
*** Bug 139901 has been marked as a duplicate of this bug. ***

Comment 21 Paul Nasrat 2004-11-22 15:06:11 UTC
*** Bug 140256 has been marked as a duplicate of this bug. ***

Comment 22 Paul Nasrat 2004-11-23 13:43:59 UTC
*** Bug 140507 has been marked as a duplicate of this bug. ***

Comment 23 Paul Nasrat 2004-11-23 16:57:52 UTC
*** Bug 140548 has been marked as a duplicate of this bug. ***

Comment 24 Paul Nasrat 2004-11-24 19:55:29 UTC
This has been pushed to FC3 updates.

Comment 25 Paul Nasrat 2004-11-29 21:56:58 UTC
Closing as released update.

Comment 26 Michael Opdenacker 2004-11-30 08:19:08 UTC
I confirm that the issue is fixed.
Thanks a lot for your support!

:-)

Michael.