Bug 1726018

Summary: lsetfilecon /boot/efi/EFI/fedora system_u:object_r:boot_t Operation not supported
Product: [Fedora] Fedora Reporter: Chris Murphy <bugzilla>
Component: selinux-policyAssignee: Lukas Vrabec <lvrabec>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: medium    
Version: rawhideCC: chunshan.zhu, dwalsh, hugh, lvrabec, mgrepl, plautrba, zbyszek, zpytela
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2019-07-02 17:02:29 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Chris Murphy 2019-07-02 04:45:18 UTC
Description of problem:

During 'dnf update' there are several instances of lsetfilecon error related to grub2 and /boot/efi/EFI/fedora.


  Upgrading        : grub2-common-1:2.02-89.fc31.noarch                                                                                                10/218 
error: lsetfilecon: (/boot/efi/EFI/fedora, system_u:object_r:boot_t:s0) Operation not supported


  Upgrading        : grub2-efi-x64-1:2.02-89.fc31.x86_64                                                                                               91/218 
error: lsetfilecon: (/boot/efi/EFI/fedora/fonts, system_u:object_r:boot_t:s0) Operation not supported
error: lsetfilecon: (/boot/efi/EFI/fedora/grubx64.efi;5d1add98, system_u:object_r:boot_t:s0) Operation not supported



Version-Release number of selected component (if applicable):
selinux-policy-3.14.4-21.fc31.noarch

How reproducible:
1 for 1

Steps to Reproduce:
1. dnf update
2.
3.

Actual results:

error messages

Expected results:

no error messages


Additional info:

Comment 1 Lukas Vrabec 2019-07-02 17:02:29 UTC

*** This bug has been marked as a duplicate of bug 1722766 ***

Comment 2 chunshan 2019-08-22 08:28:38 UTC
also reproduced when using "dnf install grub2-*"

messages:

Preparing        :                                                                                                                                                                           1/1 
  Installing       : grub2-emu-modules-1:2.02-97.fc31.x86_64                                                                                                                                   1/4 
  Installing       : grub2-emu-1:2.02-97.fc31.x86_64                                                                                                                                           2/4 
  Installing       : grub2-efi-x64-modules-1:2.02-97.fc31.noarch                                                                                                                               3/4 
  Installing       : grub2-efi-x64-cdboot-1:2.02-97.fc31.x86_64                                                                                                                                4/4 
error: lsetfilecon: (/boot/efi/EFI/fedora/fonts, system_u:object_r:boot_t:s0) Operation not supported
error: lsetfilecon: (/boot/efi/EFI/fedora/fonts/unicode.pf2;5d5e4fca, system_u:object_r:boot_t:s0) Operation not supported
error: lsetfilecon: (/boot/efi/EFI/fedora/gcdx64.efi;5d5e4fca, system_u:object_r:boot_t:s0) Operation not supported

  Running scriptlet: grub2-efi-x64-cdboot-1:2.02-97.fc31.x86_64                                                                                                                                4/4 
  Verifying        : grub2-efi-x64-cdboot-1:2.02-97.fc31.x86_64                                                                                                                                1/4 
  Verifying        : grub2-efi-x64-modules-1:2.02-97.fc31.noarch                                                                                                                               2/4 
  Verifying        : grub2-emu-1:2.02-97.fc31.x86_64                                                                                                                                           3/4 
  Verifying        : grub2-emu-modules-1:2.02-97.fc31.x86_64

Comment 3 Zbigniew Jędrzejewski-Szmek 2019-10-10 12:05:53 UTC
  Upgrading        : grub2-common-1:2.04-2.fc32.noarch                                                              2/904 
error: lsetfilecon: (/boot/efi/EFI/fedora, system_u:object_r:boot_t:s0) Operation not supported

  Upgrading        : grub2-efi-x64-1:2.04-2.fc32.x86_64                                                           405/904 
error: lsetfilecon: (/boot/efi/EFI/fedora/fonts, system_u:object_r:boot_t:s0) Operation not supported
error: lsetfilecon: (/boot/efi/EFI/fedora/grubx64.efi;5d9f1c51, system_u:object_r:boot_t:s0) Operation not supported

Comment 4 Pavel Roskin 2019-10-17 22:44:38 UTC
*** Bug 1760677 has been marked as a duplicate of this bug. ***