Bug 522224

Summary: livecd-tools leaving fake /selinux garbage behind
Product: [Fedora] Fedora Reporter: Warren Togami <wtogami>
Component: livecd-toolsAssignee: Jeremy Katz <katzj>
Status: CLOSED RAWHIDE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: low    
Version: rawhideCC: dcantrell, katzj
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2009-09-18 22:20:07 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 507678    

Description Warren Togami 2009-09-09 19:33:34 UTC
Bug #518164 exposed an issue during initscripts because it no longer checks /proc/mounts to determine if /selinux is really selinuxfs.

[root@newcaprica i386]# ls -l selinux/
total 16
drwxr-xr-x. 2 root root 4096 2009-09-08 12:57 booleans
-rwxr-xr-x. 1 root root    0 2009-09-08 12:57 commit_pending_bools
-rwxr-xr-x. 1 root root    1 2009-09-08 12:57 enforce
crw-r--r--. 1 root root 1, 3 2009-09-08 12:57 load
-rwxr-xr-x. 1 root root    1 2009-09-08 12:57 mls
-rwxr-xr-x. 1 root root    3 2009-09-08 12:57 policyvers
[root@newcaprica i386]# cat selinux/policyvers 
999

This fake /selinux is leftover from livecd-tools' creator.py as run via a subclassed ImageCreator class.  It is failing to clean up the fake /selinux.  This might have broken anytime in the last 2 years (or might have been there forever), but we never noticed any problem because initscripts didn't look at a fake /selinux before.

This currently breaks systems like NFS netboot where it is impossible to use selinux.

Comment 1 Warren Togami 2009-09-09 21:01:30 UTC
Interesting, the fake /selinux is within yesterday's nightly LiveCD image too.

Comment 2 Jesse Keating 2009-09-18 16:51:04 UTC
I'll look at patching this soon.

Comment 3 Warren Togami 2009-09-18 22:20:07 UTC
Fixed in livecd-tools-027