Bug 1393952

Summary: selinux-policy-targeted fails to run postinstall scriptlet in RHEL 7.3 when semanage is missing
Product: Red Hat Enterprise Linux 7 Reporter: Zdenek Pytela <zpytela>
Component: selinux-policyAssignee: Lukas Vrabec <lvrabec>
Status: CLOSED DUPLICATE QA Contact: BaseOS QE Security Team <qe-baseos-security>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 7.3CC: lvrabec, mgrepl, mmalik, plautrba, pvrabec, ssekidde
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-11-10 20:11:28 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Zdenek Pytela 2016-11-10 17:11:53 UTC 
Description of problem:
Update to RHEL 7.3 reports warnings when updating selinux-policy-targeted if policycoreutils rpm was not installed. The postinstall rpm scriptlet fails to run semodule/semanage commands.

Version-Release number of selected component (if applicable):
selinux-policy-targeted-3.13.1-102.el7_3.4.noarch

How reproducible:
always

Steps to Reproduce:
1. RHEL 7.2: yum remove policycoreutils
2. Update to RHEL 7.3

Actual results:
Updating   : selinux-policy-targeted-3.13.1-102.el7_3.4.noarch
warning: /etc/selinux/targeted/seusers created as /etc/selinux/targeted/seusers.rpmnew
‘/etc/selinux/targeted/modules/active/booleans.local’ -> ‘/etc/selinux/targeted/active/booleans.local’
‘/etc/selinux/targeted/modules/active/seusers’ -> ‘/etc/selinux/targeted/active/seusers.local’
/usr/libexec/selinux/selinux-policy-migrate-local-changes.sh: line 66: semanage: command not found
/usr/libexec/selinux/selinux-policy-migrate-local-changes.sh: line 66: semanage: command not found

Expected results:
no warning

Additional info:
  $ rpm -qf `which semanage semodule`
policycoreutils-python-2.5-8.el7.x86_64
policycoreutils-2.5-8.el7.x86_64
  $ rpm -q --whatrequires policycoreutils
authconfig-6.2.8-14.el7.x86_64
policycoreutils-python-2.5-8.el7.x86_64
  $ rpm -q --whatrequires policycoreutils-python
policycoreutils-devel-2.5-8.el7.x86_64
Comment 1 Petr Lautrbach 2016-11-10 20:11:28 UTC 

*** This bug has been marked as a duplicate of bug 1392010 ***