Red Hat Bugzilla – Bug 1408276
After RHEL6 to 7 inplace upgrade, installing selinux-policy-targeted may try to re-declare 'ctdbd_t'
Last modified: 2018-04-10 08:26:24 EDT
Description of problem: When an in-place upgrade is performed from RHEL6 to RHEL7, and selinux-policy-targeted RPM is installed, it appears to attempt to re-declare ctdbd_t, possibly first from holdover RHEL6 module, and then from RHEL7 module, which then fails. Example: ---------------------------------------- Installing : selinux-policy-targeted-3.13.1-102.el7_3.4.noarch 1/1 '/etc/selinux/targeted/modules/active/seusers' -> '/etc/selinux/targeted/active/seusers.local' Re-declaration of type ctdbd_t Failed to create node Bad type declaration at /etc/selinux/targeted/tmp/modules/400/ctdbd/cil:2 semodule: Failed! ------------------------------------ Version-Release number of selected component (if applicable): selinux-policy-targeted-3.13.1-102.el7_3.4.noarch How reproducible: Steps to Reproduce: 1. Start with a RHEL6 server with selinux-policy-targeted installed. 2. In-place upgrade server to RHEL7 Actual results: Error observed during installation of selinux-policy-targeted on RHEL7 ---------------------------------------- Installing : selinux-policy-targeted-3.13.1-102.el7_3.4.noarch 1/1 '/etc/selinux/targeted/modules/active/seusers' -> '/etc/selinux/targeted/active/seusers.local' Re-declaration of type ctdbd_t Failed to create node Bad type declaration at /etc/selinux/targeted/tmp/modules/400/ctdbd/cil:2 semodule: Failed! ------------------------------------ Expected results: The semodule is able to activate without error Additional info: I'm not entirely sure what the scope of ramifications of the selinux module failing to activate would be.
I don't remember when it happened, but the ctdbd policy module was renamed to ctdb. Both modules define ctdbd_t.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2018:0763