Bug 1740234

Summary: error: lsetfilecon: (/proc, system_u:object_r:default_t:s0) Operation not supported
Product: [Fedora] Fedora Reporter: Lukas Slebodnik <lslebodn>
Component: selinux-policyAssignee: Zdenek Pytela <zpytela>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: medium    
Version: 31CC: dwalsh, lvrabec, mgrepl, ovasik, pknirsch, plautrba, zpytela
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2020-02-01 10:04:13 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Lukas Slebodnik 2019-08-12 14:00:37 UTC
Description of problem:
Upgrading or reinstalling of the filesystem package trigger this error


Version-Release number of selected component (if applicable):
sh$ rpm -q filesystem selinux-policy
filesystem-3.12-2.fc31.x86_64
selinux-policy-3.14.4-29.fc31.noarch

How reproducible:
deterministic

Steps to Reproduce:
1. getenforce
2. dnf reinstall -y filesystem

Actual results:
[root@host ~]# getenforce 
Enforcing
[root@host ~]# dnf reinstall -y filesystem
Fedora - Modular Rawhide - Developmental packag  17 kB/s |  15 kB     00:00    
Fedora - Modular Rawhide - Developmental packag 2.0 MB/s | 2.3 MB     00:01    
Fedora - Rawhide - Developmental packages for t  16 kB/s |  14 kB     00:00    
Fedora - Rawhide - Developmental packages for t 8.2 MB/s |  62 MB     00:07    
Dependencies resolved.
================================================================================
 Package            Architecture   Version                Repository       Size
================================================================================
Reinstalling:
 filesystem         x86_64         3.12-2.fc31            rawhide         1.1 M

Transaction Summary
================================================================================

Total download size: 1.1 M
Installed size: 0  
Downloading Packages:
filesystem-3.12-2.fc31.x86_64.rpm               7.8 MB/s | 1.1 MB     00:00    
--------------------------------------------------------------------------------
Total                                           1.2 MB/s | 1.1 MB     00:00     
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Running scriptlet: filesystem-3.12-2.fc31.x86_64                          1/1 
  Preparing        :                                                        1/1 
  Reinstalling     : filesystem-3.12-2.fc31.x86_64                          1/2 
error: lsetfilecon: (/proc, system_u:object_r:default_t:s0) Operation not supported

  Cleanup          : filesystem-3.12-2.fc31.x86_64                          2/2 
  Running scriptlet: filesystem-3.12-2.fc31.x86_64                          2/2 
  Verifying        : filesystem-3.12-2.fc31.x86_64                          1/2 
  Verifying        : filesystem-3.12-2.fc31.x86_64                          2/2 

Reinstalled:
  filesystem-3.12-2.fc31.x86_64                                                 

Complete!

Expected results:
no failures in update log.

[root@host ~]# getenforce 
Enforcing
[root@host ~]# dnf reinstall -y filesystem
Fedora - Modular Rawhide - Developmental packag  17 kB/s |  15 kB     00:00    
Fedora - Modular Rawhide - Developmental packag 2.0 MB/s | 2.3 MB     00:01    
Fedora - Rawhide - Developmental packages for t  16 kB/s |  14 kB     00:00    
Fedora - Rawhide - Developmental packages for t 8.2 MB/s |  62 MB     00:07    
Dependencies resolved.
================================================================================
 Package            Architecture   Version                Repository       Size
================================================================================
Reinstalling:
 filesystem         x86_64         3.12-2.fc31            rawhide         1.1 M

Transaction Summary
================================================================================

Total download size: 1.1 M
Installed size: 0  
Downloading Packages:
filesystem-3.12-2.fc31.x86_64.rpm               7.8 MB/s | 1.1 MB     00:00    
--------------------------------------------------------------------------------
Total                                           1.2 MB/s | 1.1 MB     00:00     
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Running scriptlet: filesystem-3.12-2.fc31.x86_64                          1/1 
  Preparing        :                                                        1/1 
  Reinstalling     : filesystem-3.12-2.fc31.x86_64                          1/2 
  Cleanup          : filesystem-3.12-2.fc31.x86_64                          2/2 
  Running scriptlet: filesystem-3.12-2.fc31.x86_64                          2/2 
  Verifying        : filesystem-3.12-2.fc31.x86_64                          1/2 
  Verifying        : filesystem-3.12-2.fc31.x86_64                          2/2 

Reinstalled:
  filesystem-3.12-2.fc31.x86_64                                                 

Complete!



Additional info:

[root@host ~]# ls -ldZ /proc/
dr-xr-xr-x. 308 root root system_u:object_r:proc_t:s0 0 Jul 25 02:35 /proc/

[root@host ~]# matchpathcon /proc/
/proc   system_u:object_r:default_t:s0

[root@host ~]# mount -l | grep proc
proc on /proc type proc (rw,nosuid,nodev,noexec,relatime)
systemd-1 on /proc/sys/fs/binfmt_misc type autofs (rw,relatime,fd=26,pgrp=1,timeout=0,minproto=5,maxproto=5,direct,pipe_ino=2773)

Comment 1 Lukas Slebodnik 2019-08-12 15:58:45 UTC
Hmm, f30 is the same case but I cannot see error message there

sh-5.0# ls -ldZ /proc
dr-xr-xr-x. 156 root root system_u:object_r:proc_t:s0 0 Aug 11 16:48 /proc
sh-5.0# matchpathcon /proc
/proc   system_u:object_r:default_t:s0
sh-5.0# rpm -q filesystem selinux-policy
filesystem-3.10-1.fc30.x86_64
selinux-policy-3.14.3-43.fc30.noarch

sh-5.0# dnf reinstall -y filesystem
Updating Subscription Management repositories.
Unable to read consumer identity
This system is not registered to Red Hat Subscription Management. You can use subscription-manager to register.
Last metadata expiration check: 0:41:21 ago on Mon 12 Aug 2019 11:14:56 AM EDT.
Dependencies resolved.
==========================================================================================================
 Package                 Architecture        Version                     Repository                  Size
==========================================================================================================
Reinstalling:
 filesystem              x86_64              3.10-1.fc30                 fedora                     1.1 M

Transaction Summary
========================================================================================================

Total download size: 1.1 M
Installed size: 0  
Downloading Packages:
filesystem-3.10-1.fc30.x86_64.rpm                                          14 MB/s | 1.1 MB     00:00   
--------------------------------------------------------------------------------------------------------
Total                                                                      13 MB/s | 1.1 MB     00:00   
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Running scriptlet: filesystem-3.10-1.fc30.x86_64                                                    1/
  Preparing        :                                                                                  1/
  Reinstalling     : filesystem-3.10-1.fc30.x86_64                                                    1/
  Cleanup          : filesystem-3.10-1.fc30.x86_64                                                    2/
  Running scriptlet: filesystem-3.10-1.fc30.x86_64                                                    2/
  Verifying        : filesystem-3.10-1.fc30.x86_64                                                    1/
  Verifying        : filesystem-3.10-1.fc30.x86_64                                                    2/
Installed products updated.

Reinstalled:
  filesystem-3.10-1.fc30.x86_64                                                                         

Complete!

Comment 2 Ben Cotton 2019-08-13 16:50:22 UTC
This bug appears to have been reported against 'rawhide' during the Fedora 31 development cycle.
Changing version to '31'.

Comment 3 Ben Cotton 2019-08-13 17:04:26 UTC
This bug appears to have been reported against 'rawhide' during the Fedora 31 development cycle.
Changing version to 31.

Comment 4 Fedora Admin XMLRPC Client 2020-01-23 16:25:10 UTC
This package has changed maintainer in the Fedora.
Reassigning to the new maintainer of this component.

Comment 5 Lukas Slebodnik 2020-02-01 10:04:13 UTC

*** This bug has been marked as a duplicate of bug 1722766 ***