|Summary:||fixfiles -F restore resets context of /lib/ld-2.10.90.so to tmp_t|
|Product:||[Fedora] Fedora||Reporter:||Jeff Layton <jlayton>|
|Component:||policycoreutils||Assignee:||Daniel Walsh <dwalsh>|
|Status:||CLOSED CURRENTRELEASE||QA Contact:||Fedora Extras Quality Assurance <extras-qa>|
|Version:||12||CC:||dwalsh, eparis, mgrepl, sds, steved|
|Fixed In Version:||Doc Type:||Bug Fix|
|Doc Text:||Story Points:||---|
|Last Closed:||2010-03-11 22:20:15 UTC||Type:||---|
|oVirt Team:||---||RHEL 7.3 requirements from Atomic Host:|
Description Jeff Layton 2009-09-22 15:50:36 UTC
I updated my laptop to rawhide a while back and selinux has been more or less OK. I patched it a few days ago however and somehow /lib/ld-2.10.90.so ended up with a context of system_u:object_r:tmp_t:s0. At the time, I wasn't sure what was wrong other than that selinux was borked and disabling it allowed the machine to boot. So I booted with "autorelabel" set. fixfiles crawled the fs, but didn't fix the label on /lib/ld-2.10.90.so. Eventually, I figured out what was broken and ran restorecon on it by hand and it seemed to be OK. I can reproduce this at will though. If I change the security context of /lib/ld-2.10.90.so and then boot with autorelabel, it doesn't fix its label. It also doesn't fix it if I run: # fixfiles -F restore ...from the command line when the laptop is booted in permissive mode. If I run this though: # fixfiles -F restore /lib ...it does fix it.
Comment 1 Jeff Layton 2009-09-22 18:03:02 UTC
Actually, the problem is a little worse. fixfiles -F restore is actually setting the context of /lib/ld-2.10.90.so to tmp_t, even when it was correct before. Running fixfiles -F check doesn't show any changes for this file, so it's not clear to me why it's forcing this change. Let me know if there's any info you need to troubleshoot this. The machines is a fairly up to date F12 install. I don't think I have any custom selinux configuration either.
Comment 2 Jeff Layton 2009-09-22 18:18:22 UTC
Ouch, it's even worse... Just running: # fixfiles check resets the context of that file to tmp_t as well. Note that it might be resetting others too that I haven't noticed.
Comment 3 Stephen Smalley 2009-09-28 12:46:05 UTC
ls -l /lib/ld-2.10.90.so Also, mount | grep bind
Comment 4 Jeff Layton 2009-09-30 11:06:13 UTC
# ls -l /lib/ld-2.10.90.so -rwxr-xr-x. 1 root root 188200 2009-09-21 07:24 /lib/ld-2.10.90.so # mount | grep bind ...no output # grep bind /proc/mounts ...also no output
Comment 5 Bug Zapper 2009-11-16 12:46:17 UTC
This bug appears to have been reported against 'rawhide' during the Fedora 12 development cycle. Changing version to '12'. More information and reason for this action is here: http://fedoraproject.org/wiki/BugZappers/HouseKeeping
Comment 6 Daniel Walsh 2010-03-11 22:20:15 UTC
Seems to be working correct now.