Bug 2244266

Summary:	during passt resp. passt-selinux rpm-installation/upgrade various SELINUX related messages appear
Product:	[Fedora] Fedora	Reporter:	christian.sam <christian.sam>
Component:	passt	Assignee:	Stefano Brivio <sbrivio>
Status:	CLOSED DUPLICATE	QA Contact:
Severity:	low	Docs Contact:
Priority:	unspecified
Version:	37	CC:	sbrivio
Target Milestone:	---	Keywords:	SELinux
Target Release:	---
Hardware:	x86_64
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2023-11-03 16:46:42 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description christian.sam@gmail.com 2023-10-15 08:10:24 UTC

The RPM-based installation of the two related packages seems to succeed in general, but some package related SELINUX-policies can't be resolved:

Failed to resolve allow statement at /var/lib/selinux/targeted/tmp/modules/200/passt/cil:103
Failed to resolve AST
/usr/sbin/semodule:  Failed!
Failed to resolve allow statement at /var/lib/selinux/targeted/tmp/modules/200/pasta/cil:104
Failed to resolve AST
/usr/sbin/semodule:  Failed!

Reproducible: Always

Steps to Reproduce:
[root#host ~] dnf reinstall passt-0^20230908.g05627dc passt-selinux-0^20230908.g05627dc

[...]
Failed to resolve allow statement at /var/lib/selinux/targeted/tmp/modules/200/passt/cil:103
Failed to resolve AST
/usr/sbin/semodule:  Failed!
Failed to resolve allow statement at /var/lib/selinux/targeted/tmp/modules/200/pasta/cil:104
Failed to resolve AST
/usr/sbin/semodule:  Failed!

  Aufräumen             : passt-0^20230908.g05627dc-1.fc37.x86_64                                                                                                                                                                         3/4 
  Aufräumen             : passt-selinux-0^20230908.g05627dc-1.fc37.noarch                                                                                                                                                                 4/4 
  Ausgeführtes Scriptlet: passt-selinux-0^20230908.g05627dc-1.fc37.noarch                                                                                                                                                                 4/4 
  Überprüfung läuft     : passt-0^20230908.g05627dc-1.fc37.x86_64                                                                                                                                                                         1/4 
  Überprüfung läuft     : passt-0^20230908.g05627dc-1.fc37.x86_64                                                                                                                                                                         2/4 
  Überprüfung läuft     : passt-selinux-0^20230908.g05627dc-1.fc37.noarch                                                                                                                                                                 3/4 
  Überprüfung läuft     : passt-selinux-0^20230908.g05627dc-1.fc37.noarch                                                                                                                                                                 4/4 
[...]

[root@host ~]# echo $?
0




[root@host ~]# rpm -qa |grep -i selinux

libselinux-3.5-1.fc37.x86_64
libselinux-utils-3.5-1.fc37.x86_64
python3-libselinux-3.5-1.fc37.x86_64
flatpak-selinux-1.14.4-1.fc37.noarch
rpm-plugin-selinux-4.18.1-2.fc37.x86_64
selinux-policy-37.22-1.fc37.noarch
selinux-policy-targeted-37.22-1.fc37.noarch
container-selinux-2.222.0-1.fc37.noarch
passt-selinux-0^20230908.g05627dc-1.fc37.noarch

Comment 1 Stefano Brivio 2023-11-03 16:46:42 UTC


*** This bug has been marked as a duplicate of bug 2237996 ***