Bug 403771 - selinux-policy-targeted scripts hang up during an update
selinux-policy-targeted scripts hang up during an update
Status: CLOSED RAWHIDE
Product: Fedora
Classification: Fedora
Component: selinux-policy-targeted (Show other bugs)
rawhide
All Linux
low Severity medium
: ---
: ---
Assigned To: Daniel Walsh
Ben Levenson
:
Depends On:
Blocks:
  Show dependency treegraph
 
Reported: 2007-11-28 21:28 EST by Michal Jaegermann
Modified: 2007-11-30 17:12 EST (History)
0 users

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2007-11-30 08:40:03 EST
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)

  None (edit)
Description Michal Jaegermann 2007-11-28 21:28:16 EST
Description of problem:

An attempted update to the current selinux-policy-targeted
package hangs clearly in a %post script.  Killing relevant
processes, after a looong wait, produces a long series
(more that a normall scroll back buffer of a console) messages
like those:

libsepol.check_assertion_helper: assertion on line 0 violated by allow
unconfined_crond_t stunnel_t:process { fork sigchld sigkill sigstop signull
signal ptrace getsched setsched getsession getpgid setpgid getcap setcap share
getattr setexec setfscreate noatsecure siginh setrlimit rlimitinh setcurrent
setkeycreate setsockcreate }; Cannot allocate memory.
libsepol.check_assertion_helper: assertion on line 0 violated by allow
unconfined_crond_t sulogin_t:process { fork sigchld sigkill sigstop signull
signal ptrace getsched setsched getsession getpgid setpgid getcap setcap share
getattr setexec setfscreate noatsecure siginh setrlimit rlimitinh setcurrent
setkeycreate setsockcreate }; Cannot allocate memory.

All of that spillage is terminated by

libsepol.check_assertion_helper: assertion on line 0 violated by allow
rpm_script_t unconfined_crond_t:process { sigchld }; Cannot allocate memory.
libsepol.check_assertions: 426 assertion violations occured Cannot allocate memory.
libsemanage.semanage_expand_sandbox: Expand module failed Cannot allocate memory.
semodule:  Failed!

Killing stuck processes at least allows other updates to proceed
but one ends up with the following duplicates:

selinux-policy-targeted-3.0.8-44.fc8.noarch
selinux-policy-targeted-3.1.2-1.fc9.noarch

Also later in yum.log one can find the whole pile of such
complaints:
netpbm-devel: ts_done name in te is selinux-policy-targeted should be netpbm-devel
apr-util: ts_done name in te is netpbm-devel should be apr-util
.....

I gather that a failed selinux-policy-targeted update makes
yum to go out-of-sync, right?

Version-Release number of selected component (if applicable):
selinux-policy-targeted-3.1.2-1.fc9

How reproducible:
I have seen multiple complaints to that tune on fedora-test-list
Comment 1 Daniel Walsh 2007-11-30 08:40:03 EST
Fixed in selinux-policy-3.1.2-2.fc9

Note You need to log in before you can comment on or make changes to this bug.