Bug 703527

Summary: syntax errors in devices.if, gnome.if, virt.if, ssh.if, xserver.if, and file_patterns.spt
Product: [Fedora] Fedora Reporter: Valdis Kletnieks <valdis.kletnieks>
Component: selinux-policyAssignee: Miroslav Grepl <mgrepl>
Status: CLOSED CURRENTRELEASE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: rawhideCC: dwalsh, mads, mgrepl
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2011-11-21 17:03:41 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Attachments:
Description Flags
cut-n-paste of errors seen during 'yum update' none

Description Valdis Kletnieks 2011-05-10 15:21:16 UTC
Created attachment 498068 [details]
cut-n-paste of errors seen during 'yum update'

Description of problem:
While doing a 'yum update', got a whole mess of syntax errors similar to:

/usr/share/selinux/devel/include/apps/gnome.if: Syntax error on line 10345 . [type=NUMBER]

Complete list attached.

Version-Release number of selected component (if applicable):
selinux-policy-3.9.16-21.fc16.noarch

How reproducible:


Steps to Reproduce:
1.
2.
3.
  
Actual results:


Expected results:


Additional info:

Comment 1 Mads Kiilerich 2011-08-03 09:34:14 UTC
Same with selinux-policy-3.10.0-10.fc16.noarch

I wonder if some dependency or order is wrong so old SE tools are used for the installation?

I guess these errors means that the policy haven't been installed correctly and that it meaens that no SE bug reports on Fedora 16 can be trusted?

Comment 2 Daniel Walsh 2011-08-03 19:47:04 UTC
Does

yum reinstall selinux-policy-targeted
Give any errors?

Comment 3 Mads Kiilerich 2011-08-04 08:35:31 UTC
(In reply to comment #2)
> Does
> 
> yum reinstall selinux-policy-targeted
> Give any errors?

No, not here. (But ... will scripts be run (in a realistic way) by reinstall?)

Comment 4 Daniel Walsh 2011-08-04 14:54:40 UTC
You can just run the test your self

sepolgen-ifgen

Comment 5 Mads Kiilerich 2011-08-05 19:43:41 UTC
I haven't had time to follow up on this yet, but I have noticed that the systems where I have seen this had a big need for relabeling.