Description of problem: System is kept up to date with the yum daily cron. When updating packages, the %pre and %post scriptlets fail: /etc/cron.daily/yum.cron: error: %pre(kernel-smp-2.6.10-1.770_FC3.i686) scriptlet failed, exit status 255 error: install: %pre scriptlet failed (2), skipping kernel-smp-2.6.10-1.770_FC3 I believe the corresponding audit error is: type=KERNEL msg=audit(1110195203.062:9853596): item=0 name=/bin/sh inode=28707 dev=00:00 type=KERNEL msg=audit(1110195203.062:9853596): avc: denied { transition } for pid=20780 exe=/usr/bin/python path=/bin/bash dev=dm-1 ino=28707 scontext=system_u:system_r:crond_t tcontext=system_u:system_r:unconfined_t tclass=process Version-Release number of selected component (if applicable): selinux-policy-targeted-1.21.15-3 How reproducible: Every time
Added the transition rule selinux-policy-targeted-1.21.15-7 This should fix this error, there could be other access rules that are not got, please try it out. Dan
I have not seen this since the update. I think we can consider it fixed.