Description of problem: Running scriptlet: container-selinux-2:2.65-1.gitbf5b26b.fc27.noarch 17/34 neverallow check failed at /var/lib/selinux/targeted/tmp/modules/100/base/cil:9013 (neverallow base_typeattr_7 unlabeled_t (file (entrypoint))) <root> allow at /var/lib/selinux/targeted/tmp/modules/200/container/cil:1489 (allow spc_t unlabeled_t (file (entrypoint))) <root> allow at /var/lib/selinux/targeted/tmp/modules/100/sandboxX/cil:866 (allow sandbox_x_domain exec_type (file (entrypoint))) <root> allow at /var/lib/selinux/targeted/tmp/modules/100/virt/cil:1671 (allow virtd_lxc_t exec_type (file (entrypoint))) <root> allow at /var/lib/selinux/targeted/tmp/modules/100/virt/cil:2062 (allow svirt_sandbox_domain exec_type (file (entrypoint))) Failed to generate binary /usr/sbin/semodule: Failed! Version-Release number of selected component (if applicable): 2:2.65-1.gitbf5b26b.fc27 How reproducible: One time when I "dnf upgrade"d my F27 VM Steps to Reproduce: 1. Ran "dnf --refresh upgrade" 2. Saw above error Actual results: Expected results: Additional info:
Created attachment 1455570 [details] debug log from the dnf install process. generated by 'dnf reinstall -y --rpmverbosity=debug container-selinux'
Not an expert, but this looks to be covered in Bugzilla ticket #1595316. The libsemanage-2.7-3 update looks to have silenced it for me.
Yup.