Bug 559230 - SELinux errors during spacewalk removal
Summary: SELinux errors during spacewalk removal
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Spacewalk
Classification: Community
Component: Server
Version: 0.8
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Jan Pazdziora
QA Contact: Red Hat Satellite QA List
URL:
Whiteboard:
Depends On:
Blocks: space08
TreeView+ depends on / blocked
 
Reported: 2010-01-27 14:01 UTC by Miroslav Suchý
Modified: 2010-02-16 12:59 UTC (History)
0 users

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2010-02-16 12:56:25 UTC
Embargoed:


Attachments (Terms of Use)
Full log of rpm -e (35.07 KB, text/x-log)
2010-01-27 14:01 UTC, Miroslav Suchý
no flags Details

Description Miroslav Suchý 2010-01-27 14:01:52 UTC
Created attachment 387079 [details]
Full log of rpm -e

Description of problem:
I executed:
 rpm -e `rpm -qa |grep spacewalk ` osa-dispatcher SatConfig-general nocpulse-db-perl rhnpush osa-dispatcher-selinux status_log_acceptor NPalert tsdb scdb tsdb
and got several selinux errors.

[root@vmware187 ~]# rpm -qa |grep spacewalk
spacewalk-config-0.8.1-1.fc12.noarch
spacewalk-taskomatic-0.8.6-1.fc12.noarch
spacewalk-moon-0.8.2-1.fc12.noarch
spacewalk-java-oracle-0.8.6-1.fc12.noarch
spacewalk-backend-config-files-common-0.8.35-1.fc12.noarch
spacewalk-java-postgresql-0.8.6-1.fc12.noarch
spacewalk-monitoring-selinux-0.8.1-1.fc12.noarch
spacewalk-grail-0.8.9-1.fc12.noarch
spacewalk-backend-sql-0.8.35-1.fc12.noarch
spacewalk-java-lib-0.8.6-1.fc12.noarch
spacewalk-backend-server-0.8.35-1.fc12.noarch
spacewalk-backend-xmlrpc-0.8.35-1.fc12.noarch
spacewalk-backend-tools-0.8.35-1.fc12.noarch
spacewalk-backend-config-files-0.8.35-1.fc12.noarch
spacewalk-backend-applet-0.8.35-1.fc12.noarch
spacewalk-html-0.8.9-1.fc12.noarch
spacewalk-base-minimal-0.8.9-1.fc12.noarch
spacewalk-certs-tools-0.8.5-1.fc12.noarch
spacewalk-base-0.8.9-1.fc12.noarch
spacewalk-setup-0.8.1-1.fc12.noarch
spacewalk-common-0.8.1-1.fc12.noarch
spacewalk-search-0.8.1-1.fc12.noarch
spacewalk-java-config-0.8.6-1.fc12.noarch
spacewalk-doc-indexes-0.8.1-1.fc12.noarch
spacewalk-repo-0.7-4.fc12.noarch
spacewalk-backend-libs-0.8.35-1.fc12.noarch
spacewalk-backend-xml-export-libs-0.8.35-1.fc12.noarch
spacewalk-backend-iss-0.8.35-1.fc12.noarch
spacewalk-backend-iss-export-0.8.35-1.fc12.noarch
spacewalk-monitoring-0.8.1-1.fc12.noarch
spacewalk-pxt-0.8.9-1.fc12.noarch
spacewalk-sniglets-0.8.9-1.fc12.noarch
spacewalk-selinux-0.8.1-1.fc12.noarch
spacewalk-admin-0.8.1-1.fc12.noarch
spacewalk-schema-0.8.4-1.fc12.noarch
spacewalk-branding-0.8.1-1.fc12.noarch
spacewalk-backend-0.8.35-1.fc12.noarch
spacewalk-backend-package-push-server-0.8.35-1.fc12.noarch
spacewalk-backend-xp-0.8.35-1.fc12.noarch
spacewalk-java-0.8.6-1.fc12.noarch
spacewalk-cypress-0.8.3-1.fc12.noarch
spacewalk-oracle-0.8.1-1.fc12.noarch
spacewalk-backend-app-0.8.35-1.fc12.noarch
spacewalk-backend-config-files-tool-0.8.35-1.fc12.noarch
[root@vmware187 ~]# rpm -e `rpm -qa |grep spacewalk ` osa-dispatcher SatConfig-general nocpulse-db-perl rhnpush osa-dispatcher-selinux status_log_acceptor NPalert tsdb scdb tsdb
warning: /etc/rhn/rhn.conf saved as /etc/rhn/rhn.conf.rpmsave
/sbin/restorecon reset /etc/rc.d/np.d/Scheduler.pm context system_u:object_r:lib_t:s0->system_u:object_r:etc_t:s0
...
/sbin/restorecon reset /var/run/SysVStep.MonitoringScout context unconfined_u:object_r:spacewalk_monitoring_var_run_t:s0->system_u:object_r:var_run_t:s0
warning: /etc/yum.repos.d/spacewalk.repo saved as /etc/yum.repos.d/spacewalk.repo.rpmsave
libsepol.print_missing_requirements: osa-dispatcher's global requirements were not met: type/attribute spacewalk_log_t (No such file or directory).
libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory).
/usr/sbin/semodule:  Failed!
/sbin/restorecon reset /var/log/rhn/search/rhn_search_daemon.log context unconfined_u:object_r:spacewalk_log_t:s0->system_u:object_r:spacewalk_log_t:s0
...
/sbin/restorecon reset /var/cache/rhn/repodata/fedora12/repomd.xml context unconfined_u:object_r:spacewalk_cache_t:s0->system_u:object_r:spacewalk_cache_t:s0
libsepol.context_from_record: type osa_dispatcher_upstream_notif_server_port_t is not defined (No such file or directory).
libsepol.context_from_record: could not create context structure (Invalid argument).
libsepol.port_from_record: could not create port structure for range 1290:1290 (tcp) (Invalid argument).
libsepol.sepol_port_modify: could not load port range 1290 - 1290 (tcp) (Invalid argument).
libsemanage.dbase_policydb_modify: could not modify record value (Invalid argument).
libsemanage.semanage_base_merge_components: could not merge local modifications into policy (Invalid argument).
/usr/sbin/semodule:  Failed!
/sbin/restorecon reset /var/log/rhn/osa-dispatcher.log context unconfined_u:object_r:osa_dispatcher_log_t:s0->system_u:object_r:osa_dispatcher_log_t:s0

Comment 1 Jan Pazdziora 2010-01-28 12:44:01 UTC
When run with yum remove, to show what package was being removed at which moment, the output is this:

  Erasing        : spacewalk-base-minimal                                  1/49 
  Erasing        : spacewalk-backend-tools                                 2/49 
  Erasing        : spacewalk-monitoring-selinux                            3/49 
libsepol.sepol_genbools_array: boolean spacewalk_monitoring_disable_trans no longer in policy
/sbin/restorecon reset /etc/rc.d/np.d/NetworkFilesystem.pm context system_u:object_r:lib_t:s0->system_u:object_r:etc_t:s0
/sbin/restorecon reset /etc/rc.d/np.d/AckProcessor.pm context system_u:object_r:lib_t:s0->system_u:object_r:etc_t:s0
[ ... a lot of restorecon messages trimmed ... ]
/sbin/restorecon reset /var/run/SysVStep.MonitoringScout context system_u:object_r:unlabeled_t:s0->system_u:object_r:var_run_t:s0
  Erasing        : spacewalk-backend-xp                                    4/49 
  Erasing        : spacewalk-backend-iss-export                            5/49 
  Erasing        : SatConfig-general                                       6/49 
  Erasing        : spacewalk-schema                                        7/49 
  Erasing        : spacewalk-backend-applet                                8/49 
  Erasing        : osa-dispatcher-selinux                                  9/49 
libsepol.context_from_record: type osa_dispatcher_upstream_notif_server_port_t is not defined
libsepol.context_from_record: could not create context structure
libsepol.port_from_record: could not create port structure for range 1290:1290 (tcp)
libsepol.sepol_port_modify: could not load port range 1290 - 1290 (tcp)
libsemanage.dbase_policydb_modify: could not modify record value
libsemanage.semanage_base_merge_components: could not merge local modifications into policy
/usr/sbin/semodule:  Failed!
  Erasing        : spacewalk-backend-package-push-server                  10/49 
  Erasing        : status_log_acceptor                                    11/49 
  Erasing        : spacewalk-setup                                        12/49 
  Erasing        : spacewalk-common                                       13/49 
  Erasing        : spacewalk-java-lib                                     14/49 
  Erasing        : spacewalk-sniglets                                     15/49 
  Erasing        : spacewalk-config                                       16/49 
warning: /etc/rhn/rhn.conf saved as /etc/rhn/rhn.conf.rpmsave
  Erasing        : spacewalk-taskomatic                                   17/49 
  Erasing        : spacewalk-branding                                     18/49 
  Erasing        : spacewalk-html                                         19/49 
  Erasing        : spacewalk-backend-app                                  20/49 
  Erasing        : NPalert                                                21/49 
  Erasing        : spacewalk-backend-xml-export-libs                      22/49 
  Erasing        : spacewalk-java                                         23/49 
  Erasing        : spacewalk-grail                                        24/49 
  Erasing        : osa-dispatcher                                         25/49 
  Erasing        : spacewalk-pxt                                          26/49 
  Erasing        : spacewalk-java-config                                  27/49 
  Erasing        : spacewalk-backend-libs                                 28/49 
  Erasing        : tsdb                                                   29/49 
  Erasing        : spacewalk-backend-sql                                  30/49 
  Erasing        : spacewalk-admin                                        31/49 
  Erasing        : spacewalk-doc-indexes                                  32/49 
  Erasing        : rhnpush                                                33/49 
  Erasing        : spacewalk-selinux                                      34/49 
libsepol.print_missing_requirements: osa-dispatcher's global requirements were not met: type/attribute spacewalk_log_t
libsemanage.semanage_link_sandbox: Link packages failed
/usr/sbin/semodule:  Failed!
  Erasing        : spacewalk-backend-iss                                  35/49 
  Erasing        : spacewalk-java-oracle                                  36/49 
  Erasing        : nocpulse-db-perl                                       37/49 
  Erasing        : spacewalk-oracle                                       38/49 
  Erasing        : spacewalk-base                                         39/49 
  Erasing        : spacewalk-backend                                      40/49 
  Erasing        : spacewalk-search                                       41/49 
  Erasing        : spacewalk-certs-tools                                  42/49 
  Erasing        : spacewalk-backend-server                               43/49 
  Erasing        : scdb                                                   44/49 
  Erasing        : spacewalk-backend-xmlrpc                               45/49 
  Erasing        : spacewalk-monitoring                                   46/49 
  Erasing        : spacewalk-backend-config-files                         47/49 
  Erasing        : spacewalk-backend-config-files-common                  48/49 
  Erasing        : spacewalk-backend-config-files-tool                    49/49

Comment 2 Jan Pazdziora 2010-01-29 15:53:30 UTC
osa-dispatcher fix 349fc5a0383c56324bee0f73f92880ad60c0878b.

Comment 3 Jan Pazdziora 2010-01-29 16:03:11 UTC
fix for spacewalk-selinux being removed before osa-dispatcher-selinux 43cce89844bc24ce2004817c5d9b581a874665da.

Comment 4 Jan Pazdziora 2010-02-01 10:27:35 UTC
With nightly as of today, there are no more errors:

# yum remove `rpm -qa |grep spacewalk ` osa-dispatcher SatConfig-general
Loaded plugins: rhnplugin, security
This system is not registered with RHN.
RHN support will be disabled.
Setting up Remove Process
Resolving Dependencies
--> Running transaction check
---> Package SatConfig-general.noarch 0:1.216.16-1.el5 set to be erased
--> Processing Dependency: SatConfig-general for package: NPalert
--> Processing Dependency: SatConfig-general for package: status_log_acceptor

[...]


Downloading Packages:
Running rpm_check_debug
Running Transaction Test
Finished Transaction Test
Transaction Test Succeeded
Running Transaction
  Erasing        : spacewalk-branding                                                                                                                      1/49 
  Erasing        : spacewalk-schema                                                                                                                        2/49 
  Erasing        : spacewalk-monitoring-selinux                                                                                                            3/49 
libsepol.sepol_genbools_array: boolean spacewalk_monitoring_disable_trans no longer in policy
/sbin/restorecon reset /etc/rc.d/np.d/SuperSput.pm context system_u:object_r:lib_t:s0->system_u:object_r:etc_t:s0

[...]

/sbin/restorecon reset /var/run/SysVStep.TSDBLocalQueue context system_u:object_r:unlabeled_t:s0->system_u:object_r:var_run_t:s0
  Erasing        : tsdb                                                                                                                                    4/49 
  Erasing        : NPalert                                                                                                                                 5/49 
  Erasing        : spacewalk-backend-config-files-common                                                                                                   6/49 
  Erasing        : SatConfig-general                                                                                                                       7/49 
  Erasing        : spacewalk-pxt                                                                                                                           8/49 
  Erasing        : spacewalk-backend-package-push-server                                                                                                   9/49 
  Erasing        : spacewalk-base-minimal                                                                                                                 10/49 
  Erasing        : spacewalk-backend-iss                                                                                                                  11/49 
  Erasing        : status_log_acceptor                                                                                                                    12/49 
  Erasing        : spacewalk-common                                                                                                                       13/49 
  Erasing        : spacewalk-backend-config-files-tool                                                                                                    14/49 
  Erasing        : spacewalk-backend-server                                                                                                               15/49 
  Erasing        : spacewalk-config                                                                                                                       16/49 
warning: /etc/rhn/rhn.conf saved as /etc/rhn/rhn.conf.rpmsave
  Erasing        : spacewalk-monitoring                                                                                                                   17/49 
  Erasing        : spacewalk-java-lib                                                                                                                     18/49 
  Erasing        : spacewalk-backend-xml-export-libs                                                                                                      19/49 
  Erasing        : spacewalk-setup                                                                                                                        20/49 
  Erasing        : spacewalk-backend-tools                                                                                                                21/49 
  Erasing        : spacewalk-taskomatic                                                                                                                   22/49 
  Erasing        : osa-dispatcher-selinux                                                                                                                 23/49 
libsepol.sepol_genbools_array: boolean osa_dispatcher_disable_trans no longer in policy
/sbin/restorecon reset /usr/sbin/osa-dispatcher context system_u:object_r:unlabeled_t:s0->system_u:object_r:sbin_t:s0
/sbin/restorecon reset /var/log/rhn/osa-dispatcher.log context system_u:object_r:unlabeled_t:s0->system_u:object_r:spacewalk_log_t:s0
  Erasing        : spacewalk-java-config                                                                                                                  24/49 
  Erasing        : spacewalk-sniglets                                                                                                                     25/49 
  Erasing        : spacewalk-java                                                                                                                         26/49 
  Erasing        : spacewalk-backend-config-files                                                                                                         27/49 
  Erasing        : osa-dispatcher                                                                                                                         28/49 
  Erasing        : spacewalk-doc-indexes                                                                                                                  29/49 
  Erasing        : spacewalk-backend-xp                                                                                                                   30/49 
  Erasing        : spacewalk-backend                                                                                                                      31/49 
  Erasing        : spacewalk-selinux                                                                                                                      32/49 
libsepol.sepol_genbools_array: boolean spacewalk_nfs_mountpoint no longer in policy
/sbin/restorecon reset /usr/sbin/rhn-sat-restart-silent context system_u:object_r:unlabeled_t:s0->system_u:object_r:sbin_t:s0
/sbin/restorecon reset /var/log/rhn context system_u:object_r:unlabeled_t:s0->system_u:object_r:var_log_t:s0

[...]

/sbin/restorecon: /usr/bin/rhn-sudo-ssl-tool not reset customized by admin to system_u:object_r:httpd_unconfined_script_exec_t:s0
/sbin/restorecon: /usr/bin/rhn-sudo-load-ssl-cert not reset customized by admin to system_u:object_r:httpd_unconfined_script_exec_t:s0
  Erasing        : spacewalk-backend-iss-export                                                                                                           33/49 
  Erasing        : nocpulse-db-perl                                                                                                                       34/49 
  Erasing        : spacewalk-backend-applet                                                                                                               35/49 
  Erasing        : spacewalk-oracle                                                                                                                       36/49 
  Erasing        : spacewalk-backend-xmlrpc                                                                                                               37/49 
  Erasing        : spacewalk-admin                                                                                                                        38/49 
  Erasing        : spacewalk-backend-libs                                                                                                                 39/49 
  Erasing        : spacewalk-java-oracle                                                                                                                  40/49 
  Erasing        : spacewalk-search                                                                                                                       41/49 
  Erasing        : spacewalk-certs-tools                                                                                                                  42/49 
  Erasing        : scdb                                                                                                                                   43/49 
  Erasing        : spacewalk-base                                                                                                                         44/49 
  Erasing        : spacewalk-grail                                                                                                                        45/49 
  Erasing        : spacewalk-backend-app                                                                                                                  46/49 
  Erasing        : rhnpush                                                                                                                                47/49 
  Erasing        : spacewalk-backend-sql                                                                                                                  48/49 
  Erasing        : spacewalk-html                                                                                                                         49/49 

Removed:
  SatConfig-general.noarch 0:1.216.16-1.el5                                      osa-dispatcher.noarch 0:5.9.27-1.el5                                          
  spacewalk-admin.noarch 0:0.8.1-1.el5                                           spacewalk-backend.noarch 0:0.8.40-1.el5                                       
  spacewalk-backend-app.noarch 0:0.8.40-1.el5                                    spacewalk-backend-applet.noarch 0:0.8.40-1.el5                                
  spacewalk-backend-config-files.noarch 0:0.8.40-1.el5                           spacewalk-backend-config-files-common.noarch 0:0.8.40-1.el5                   
  spacewalk-backend-config-files-tool.noarch 0:0.8.40-1.el5                      spacewalk-backend-iss.noarch 0:0.8.40-1.el5                                   
  spacewalk-backend-iss-export.noarch 0:0.8.40-1.el5                             spacewalk-backend-libs.noarch 0:0.8.40-1.el5                                  
  spacewalk-backend-package-push-server.noarch 0:0.8.40-1.el5                    spacewalk-backend-server.noarch 0:0.8.40-1.el5                                
  spacewalk-backend-sql.noarch 0:0.8.40-1.el5                                    spacewalk-backend-tools.noarch 0:0.8.40-1.el5                                 
  spacewalk-backend-xml-export-libs.noarch 0:0.8.40-1.el5                        spacewalk-backend-xmlrpc.noarch 0:0.8.40-1.el5                                
  spacewalk-backend-xp.noarch 0:0.8.40-1.el5                                     spacewalk-base.noarch 0:0.8.10-1.el5                                          
  spacewalk-base-minimal.noarch 0:0.8.10-1.el5                                   spacewalk-branding.noarch 0:0.8.2-1.el5                                       
  spacewalk-certs-tools.noarch 0:0.8.6-1.el5                                     spacewalk-common.noarch 0:0.8.1-1.el5                                         
  spacewalk-config.noarch 0:0.8.1-1.el5                                          spacewalk-doc-indexes.noarch 0:0.8.1-1.el5                                    
  spacewalk-grail.noarch 0:0.8.10-1.el5                                          spacewalk-html.noarch 0:0.8.10-1.el5                                          
  spacewalk-java.noarch 0:0.8.9-1.el5                                            spacewalk-java-config.noarch 0:0.8.9-1.el5                                    
  spacewalk-java-lib.noarch 0:0.8.9-1.el5                                        spacewalk-java-oracle.noarch 0:0.8.9-1.el5                                    
  spacewalk-monitoring.noarch 0:0.8.1-1.el5                                      spacewalk-monitoring-selinux.noarch 0:0.8.1-1.el5                             
  spacewalk-oracle.noarch 0:0.8.1-1.el5                                          spacewalk-pxt.noarch 0:0.8.10-1.el5                                           
  spacewalk-schema.noarch 0:0.8.5-1.el5                                          spacewalk-search.noarch 0:0.8.1-1.el5                                         
  spacewalk-selinux.noarch 0:0.8.1-1.el5                                         spacewalk-setup.noarch 0:0.8.1-1.el5                                          
  spacewalk-sniglets.noarch 0:0.8.10-1.el5                                       spacewalk-taskomatic.noarch 0:0.8.9-1.el5                                     

Dependency Removed:
  NPalert.noarch 0:1.126.11-1.el5   nocpulse-db-perl.noarch 0:3.6.3-1.el5       osa-dispatcher-selinux.noarch 0:5.9.27-1.el5   rhnpush.noarch 0:5.4.9-1.el5  
  scdb.noarch 0:1.15.6-1.el5        status_log_acceptor.noarch 0:0.12.8-1.el5   tsdb.noarch 0:1.27.22-1.el5                   

Complete!
[root@hp-xw8400-01 ~]#

Comment 5 Michael Mráka 2010-02-16 12:59:48 UTC
Spacewalk 0.8 has been released


Note You need to log in before you can comment on or make changes to this bug.