Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 1777502

Summary:	error: lsetfilecon: (/boot/efi/EFI/redhat/fonts, system_u:object_r:boot_t:s0) Operation not supported
Product:	Red Hat Enterprise Linux 8	Reporter:	Welterlen Benoit <bwelterl>
Component:	rpm	Assignee:	Panu Matilainen <pmatilai>
Status:	CLOSED ERRATA	QA Contact:	Eva Mrakova <emrakova>
Severity:	low	Docs Contact:
Priority:	low
Version:	8.1	CC:	bugzilla, dbodnarc, dornelas, james.antill, jpbn, jwedgeco, leonfauster, mdomonko, mkenjale, pdwyer, peter.vreman, pjanda, pkratoch, pmatilai, prd-fedora, pzhukov, wasphin
Target Milestone:	rc	Flags:	pm-rhel: mirror+
Target Release:	8.0
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	rpm-4.14.3-1.el8	Doc Type:	Bug Fix
Doc Text:	Cause: A package is installed on a file system that doesn't support the setting of SELinux security contexts. Consequence: RPM prints an error message about the operation not being supported, although it exits with code 0 (success). Fix: RPM has been fixed to not print the message, as it's considered spurious in this scenario. The point being, if the FS doesn't support the contexts, there's no point in complaining about it in RPM. Result: RPM no longer prints an error message in this scenario.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2020-11-04 02:03:16 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1765187
Bug Blocks:	1743676, 1825061

Description Welterlen Benoit 2019-11-27 16:27:42 UTC

This bug was initially created as a copy of Bug #1722766

I am copying this bug because: 
I can see this issue on RHEL8.1 (as a customer)


 yum reinstall grub2-efi
Updating Subscription Management repositories.
Unable to read consumer identity
This system is not registered to Red Hat Subscription Management. You can use subscription-manager to register.
Last metadata expiration check: 0:00:37 ago on Wed 27 Nov 2019 11:18:18 AM EST.
Dependencies resolved.
==============================================================================================================================================================================================================================================
 Package                                                       Architecture                                           Version                                                        Repository                                          Size
==============================================================================================================================================================================================================================================
Reinstalling:
 grub2-efi-x64                                                 x86_64                                                 1:2.02-78.el8                                                  os                                                 400 k

Transaction Summary
==============================================================================================================================================================================================================================================

Total download size: 400 k
Installed size: 1.8 M
Is this ok [y/N]: y
Downloading Packages:
grub2-efi-x64-2.02-78.el8.x86_64.rpm                                                                                                                                                                          8.8 MB/s | 400 kB     00:00    
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total                                                                                                                                                                                                         8.0 MB/s | 400 kB     00:00     
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Preparing        :                                                                                                                                                                                                                      1/1 
  Reinstalling     : grub2-efi-x64-1:2.02-78.el8.x86_64                                                                                                                                                                                   1/2 
error: lsetfilecon: (/boot/efi/EFI/redhat/fonts, system_u:object_r:boot_t:s0) Operation not supported
error: lsetfilecon: (/boot/efi/EFI/redhat/grubx64.efi;5ddea1f1, system_u:object_r:boot_t:s0) Operation not supported

  Cleanup          : grub2-efi-x64-1:2.02-78.el8.x86_64                                                                                                                                                                                   2/2 
  Verifying        : grub2-efi-x64-1:2.02-78.el8.x86_64                                                                                                                                                                                   1/2 
  Verifying        : grub2-efi-x64-1:2.02-78.el8.x86_64                                                                                                                                                                                   2/2 
Installed products updated.

Reinstalled:
  grub2-efi-x64-1:2.02-78.el8.x86_64                                                                                                                                                                                                          

Complete!

--
The  lsetxattr("/boot/efi/EFI/redhat" is not an issue but it seems that it is more verbose than before...

Comment 1 Panu Matilainen 2019-11-28 08:36:32 UTC

That message comes from rpm-plugin-selinux, yum is not involved.

Silencing it is easy, just makes me wonder what the right thing to do is. Clearly if a filesystem doesn't support labeling there's not much point complaining about it, BUT only if this is an expected situation. With EFI it is, but there are situations where that might not be the case.

Comment 2 Welterlen Benoit 2019-11-28 08:50:51 UTC

Thanks for the component change.

If the FS does not allow extended attributes, it should not try to lsetxattr.
Or the error should be filtered if it's due to FS capabilities.

Thanks

Benoit

Comment 3 Panu Matilainen 2019-12-13 12:21:13 UTC

Proposed upstream fix: https://github.com/rpm-software-management/rpm/pull/976

Comment 4 Panu Matilainen 2019-12-13 12:24:00 UTC

Just to be clear: the error is cosmetical, rpm is already filtering out -EOPNOTSUPP error so the install doesn't fail, it's just unnecessarily noisy about it.

Comment 5 Chris Murphy 2020-01-18 19:25:59 UTC

Looks like the same problem as bug 1722766.

Comment 7 redjaap@softskills.nl 2020-03-19 17:57:04 UTC

it is also in fedora 32. 
several times in dnf update. One of them is 
Error: lsetfilecon: (/boot/efi/EFI/fedora/gcdx64.efi;5e73b099, system_u:object_r:boot_t:s0) Operation not supported

Comment 8 redjaap@softskills.nl 2020-03-19 17:59:03 UTC

error: lsetfilecon: (/boot/efi/EFI/fedora/fonts, system_u:object_r:boot_t:s0) Operation not supported
error: lsetfilecon: (/boot/efi/EFI/fedora/grubia32.efi;5e73b099, system_u:object_r:boot_t:s0) Operation not supported

  Upgrading        : grub2-efi-x64-1:2.04-10.fc32.x86_64                  26/72 
error: lsetfilecon: (/boot/efi/EFI/fedora/grubx64.efi;5e73b099, system_u:object_r:boot_t:s0) Operation not supported

  Upgrading        : grub2-tools-extra-1:2.04-10.fc32.x86_64              27/72 
  Upgrading        : grub2-efi-ia32-cdboot-1:2.04-10.fc32.x86_64          28/72 
error: lsetfilecon: (/boot/efi/EFI/fedora/fonts, system_u:object_r:boot_t:s0) Operation not supported
error: lsetfilecon: (/boot/efi/EFI/fedora/fonts/unicode.pf2;5e73b099, system_u:object_r:boot_t:s0) Operation not supported
error: lsetfilecon: (/boot/efi/EFI/fedora/gcdia32.efi;5e73b099, system_u:object_r:boot_t:s0) Operation not supported

  Upgrading        : grub2-efi-x64-cdboot-1:2.04-10.fc32.x86_64           29/72 
error: lsetfilecon: (/boot/efi/EFI/fedora/gcdx64.efi;5e73b099, system_u:object_r:boot_t:s0) Operation not supported

Comment 11 Pavel Zhukov 2020-04-30 09:11:06 UTC

*** Bug 1827087 has been marked as a duplicate of this bug. ***

Comment 14 Panu Matilainen 2020-05-27 11:05:28 UTC

*** Bug 1783201 has been marked as a duplicate of this bug. ***

Comment 15 Javier Martinez Canillas 2020-05-27 13:35:28 UTC

*** Bug 1798530 has been marked as a duplicate of this bug. ***

Comment 19 Panu Matilainen 2020-06-15 11:33:46 UTC

*** Bug 1845168 has been marked as a duplicate of this bug. ***

Comment 23 Leon Fauster 2020-07-28 20:41:21 UTC

These are outputs of CentOS8 but I had the same on RHEL:

While updating EL8.1 to EL8.2

  Ausgeführtes Scriptlet: libgcc-8.3.1-5.el8.0.2.x86_64                                                             1/1422 
  Aktualisieren         : grub2-common-1:2.02-81.el8.noarch                                                         2/1422 
Fehler: lsetfilecon: (/boot/efi/EFI/centos, system_u:object_r:boot_t:s0) Die Operation wird nicht unterstützt
  Aktualisieren         : libreoffice-data-1:6.0.6.1-20.el8.noarch                                                  3/1422 
  Ausgeführtes Scriptlet: libreoffice-data-1:6.0.6.1-20.el8.noarch                                                  3/1422 
  Aktualisieren         : liberation-fonts-common-1:2.00.3-7.el8.noarch     



  Aktualisieren         : nss-tools-3.44.0-15.el8.x86_64                                                 626/1422 
  Aktualisieren         : composer-cli-28.14.42-2.el8_2.x86_64                                           627/1422 
  Aktualisieren         : grub2-efi-x64-1:2.02-81.el8.x86_64                                             628/1422 
Fehler: lsetfilecon: (/boot/efi/EFI/centos/fonts, system_u:object_r:boot_t:s0) Die Operation wird nicht unterstützt
Fehler: lsetfilecon: (/boot/efi/EFI/centos/grubx64.efi;5ee8b714, system_u:object_r:boot_t:s0) Die Operation wird nicht unterstützt
  Aktualisieren         : hyperv-daemons-0-0.28.20180415git.el8.x86_64                                   629/1422 
  Aktualisieren         : samba-4.11.2-13.el8.x86_64                                                     630/1422 
  Ausgeführtes Scriptlet: samba-4.11.2-13.el8.x86_64                                     




 Aktualisieren         : grub2-pc-modules-1:2.02-81.el8.noarch                                           701/1422 
 Aktualisieren         : shim-x64-15-11.el8.x86_64                                                       702/1422 
Fehler: lsetfilecon: (/boot/efi/EFI/BOOT/BOOTX64.EFI;5ee8b714, system_u:object_r:boot_t:s0) Die Operation wird nicht unterstützt
Fehler: lsetfilecon: (/boot/efi/EFI/BOOT/fbx64.efi;5ee8b714, system_u:object_r:boot_t:s0) Die Operation wird nicht unterstützt
Fehler: lsetfilecon: (/boot/efi/EFI/centos/BOOTX64.CSV;5ee8b714, system_u:object_r:boot_t:s0) Die Operation wird nicht unterstützt
Fehler: lsetfilecon: (/boot/efi/EFI/centos/mmx64.efi;5ee8b714, system_u:object_r:boot_t:s0) Die Operation wird nicht unterstützt
Fehler: lsetfilecon: (/boot/efi/EFI/centos/shimx64-centos.efi;5ee8b714, system_u:object_r:boot_t:s0) Die Operation wird nicht unterstützt
Fehler: lsetfilecon: (/boot/efi/EFI/centos/shimx64.efi;5ee8b714, system_u:object_r:boot_t:s0) Die Operation wird nicht unterstützt
 Aktualisieren         : mobile-broadband-provider-info-20190618-2.el8.noarch                            703/1422 
 Aktualisieren         : libertas-usb8388-firmware-2:20191202-97.gite8a0f4c9.el8.noarch

Comment 24 Eva Mrakova 2020-07-29 07:14:00 UTC

Hi Leon, 

on RHEL8, the bug has been fixed in rpm-4.14.3-1.el8. Which version of rpm do you have
on your RHEL system? For older versions of rpm the error messages are expected.

Comment 25 Leon Fauster 2020-07-29 11:25:02 UTC

We use a custom AMI on AWS which is based on 8.1 and then we do the update, so an older version of rpm.

But good to see that the fix is there (https://bugzilla.redhat.com/show_bug.cgi?id=1765187)

We should update the AMI. Thanks.

Comment 28 errata-xmlrpc 2020-11-04 02:03:16 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (rpm bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:4561