Hide Forgot
Created attachment 533001 [details] 'yum update' log. Description of problem: Update errors. Version-Release number of selected component (if applicable): selinux-policy-targeted.noarch 3.10.0-55.fc16 @updates How reproducible: $ yum update Steps to Reproduce: 1. as above 2. 3. Actual results: See attachment for full update log. ... Updating : selinux-policy-targeted-3.10.0-55.fc16.noarch 14/48 SELinux: Could not downgrade policy file /etc/selinux/targeted/policy/policy.26, searching for an older version. SELinux: Could not open policy file <= /etc/selinux/targeted/policy/policy.26: No such file or directory load_policy: Can't load policy: No such file or directory ... Expected results: no errors Additional info:
Could you try to reinstall that package and see if it succeeds? yum reinstall selinux-policy-targeted
Miroslav, I just checked in a fix to run the rebuild of policy separately from the load_policy. Might save some memory, and would allow a user to just run load_policy after the fact rather then rebuild.
I got this error after upgrading a FC 15 box to FC 16 and then running yum update. Updating : selinux-policy-targeted-3.10.0-55.fc16.noarch 7/80 libsepol.expand_filename_trans: Conflicting filename trans rules xvc9 kernel_t device_t : chr_file otype1:tty_device_t otype2:tty_device_t libsepol.expand_module: Error during expand libsemanage.semanage_expand_sandbox: Expand module failed /usr/sbin/semodule: Failed!
(In reply to comment #1) > Could you try to reinstall that package and see if it succeeds? > > yum reinstall selinux-policy-targeted [root@localhost jb]# yum reinstall selinux-policy-targeted Loaded plugins: langpacks, presto, priorities, refresh-packagekit Setting up Reinstall Process ... 1 packages excluded due to repository priority protections Resolving Dependencies --> Running transaction check ---> Package selinux-policy-targeted.noarch 0:3.10.0-55.fc16 will be reinstalled --> Finished Dependency Resolution Dependencies Resolved =============================================================================== Package Arch Version Repository Size =============================================================================== Reinstalling: selinux-policy-targeted noarch 3.10.0-55.fc16 updates 3.5 M Transaction Summary =============================================================================== Reinstall 1 Package Total download size: 3.5 M Installed size: 12 M Is this ok [y/N]: y Downloading Packages: selinux-policy-targeted-3.10.0-55.fc16.noarch.rpm | 3.5 MB 00:14 Running Transaction Check Running Transaction Test Transaction Test Succeeded Running Transaction Installing : selinux-policy-targeted-3.10.0-55.fc16.noarch 1/1 SELinux: Could not downgrade policy file /etc/selinux/targeted/policy/policy.26, searching for an older version. SELinux: Could not open policy file <= /etc/selinux/targeted/policy/policy.26: No such file or directory load_policy: Can't load policy: No such file or directory Installed: selinux-policy-targeted.noarch 0:3.10.0-55.fc16 Complete! [root@localhost jb]#
uname -r Please reboot and try the yum reinstall selinux-policy-targeted again.
(In reply to comment #5) > uname -r > > Please reboot and try the > > yum reinstall selinux-policy-targeted > > again. Rebooted. [root@localhost jb]# uname -r 3.1.0-7.fc16.i686 [root@localhost jb]# yum reinstall selinux-policy-targeted Loaded plugins: langpacks, presto, priorities, refresh-packagekit Setting up Reinstall Process adobe-linux-i386 | 951 B 00:00 rpmfusion-free-updates | 3.3 kB 00:00 rpmfusion-nonfree-updates | 3.3 kB 00:00 updates/metalink | 14 kB 00:00 updates | 4.7 kB 00:00 updates/primary_db | 806 kB 00:03 updates/group_gz | 431 kB 00:01 1 packages excluded due to repository priority protections Resolving Dependencies --> Running transaction check ---> Package selinux-policy-targeted.noarch 0:3.10.0-55.fc16 will be reinstalled --> Finished Dependency Resolution Dependencies Resolved =============================================================================== Package Arch Version Repository Size =============================================================================== Reinstalling: selinux-policy-targeted noarch 3.10.0-55.fc16 updates 3.5 M Transaction Summary =============================================================================== Reinstall 1 Package Total download size: 3.5 M Installed size: 12 M Is this ok [y/N]: y Downloading Packages: selinux-policy-targeted-3.10.0-55.fc16.noarch.rpm | 3.5 MB 00:14 Running Transaction Check Running Transaction Test Transaction Test Succeeded Running Transaction Installing : selinux-policy-targeted-3.10.0-55.fc16.noarch 1/1 SELinux: Could not downgrade policy file /etc/selinux/targeted/policy/policy.26, searching for an older version. SELinux: Could not open policy file <= /etc/selinux/targeted/policy/policy.26: No such file or directory load_policy: Can't load policy: No such file or directory Installed: selinux-policy-targeted.noarch 0:3.10.0-55.fc16 Complete! [root@localhost jb]#
[jb@localhost ~]$ ls -al /etc/selinux/targeted/ total 32 drwxr-xr-x. 5 root root 4096 Nov 12 09:24 . drwxr-xr-x. 3 root root 4096 Nov 7 21:16 .. drwxr-xr-x. 4 root root 4096 Nov 12 09:24 contexts drwxr-xr-x. 3 root root 4096 Nov 12 09:24 modules drwxr-xr-x. 2 root root 4096 Nov 12 09:24 policy -rw-r--r-- 1 root root 33 Nov 7 21:11 .policymd5 -rw-r--r-- 1 root root 607 Nov 7 21:10 setrans.conf -rw-r--r-- 1 root root 106 Nov 7 21:11 seusers [jb@localhost ~]$ ls -al /etc/selinux/targeted/policy/ total 4024 drwxr-xr-x. 2 root root 4096 Nov 12 09:24 . drwxr-xr-x. 5 root root 4096 Nov 12 09:24 .. -rw-r--r-- 1 root root 4109218 Nov 7 21:11 policy.26 [jb@localhost ~]$
rpm -q libsepol libsemanage libselinux libsepol-2.1.3-2.fc16.x86_64 libsemanage-2.1.2-1.fc16.x86_64 libselinux-2.1.6-4.fc16.x86_64 libselinux-2.1.6-4.fc16.i686
cat /selinux/policyvers
I guess that would be: cat /sys/fs/selinux/policyvers on F16. Or run sestatus.
This message is a reminder that Fedora 16 is nearing its end of life. Approximately 4 (four) weeks from now Fedora will stop maintaining and issuing updates for Fedora 16. It is Fedora's policy to close all bug reports from releases that are no longer maintained. At that time this bug will be closed as WONTFIX if it remains open with a Fedora 'version' of '16'. Package Maintainer: If you wish for this bug to remain open because you plan to fix it in a currently maintained version, simply change the 'version' to a later Fedora version prior to Fedora 16's end of life. Bug Reporter: Thank you for reporting this issue and we are sorry that we may not be able to fix it before Fedora 16 is end of life. If you would still like to see this bug fixed and are able to reproduce it against a later version of Fedora, you are encouraged to click on "Clone This Bug" and open it against that version of Fedora. Although we aim to fix as many bugs as possible during every release's lifetime, sometimes those efforts are overtaken by events. Often a more recent Fedora release includes newer upstream software that fixes bugs or makes them obsolete. The process we are following is described here: http://fedoraproject.org/wiki/BugZappers/HouseKeeping
Fedora 16 changed to end-of-life (EOL) status on 2013-02-12. Fedora 16 is no longer maintained, which means that it will not receive any further security or bug fix updates. As a result we are closing this bug. If you can reproduce this bug against a currently maintained version of Fedora please feel free to reopen this bug against that version. Thank you for reporting this bug and we are sorry it could not be fixed.