Description of problem: Running udpates on a arm test image to selinux-policy-targeted-3.10.0-128.fc17.noarch, a needed context disappeared during the update Version-Release number of selected component (if applicable): 3.10.0-128 How reproducible: arm VFAD image RC2, for vexpress (non GUI), and running yum update Steps to Reproduce: as above Actual results: Updating : selinux-policy-targeted-3.10.0-128.fc17.noarch 37/89 [ 2082.649789] SELinux: Permission ptrace_child in class process not defined in policy. [ 2082.652016] SELinux: the above unknown classes and permissions will be allowed [ 2085.707201] SELinux: Context unconfined_u:system_r:obex_t:s0-s0:c0.c1023 became invalid (unmapped). [ 2093.270450] SELinux: Context system_u:system_r:obex_t:s0-s0:c0.c1023 became invalid (unmapped). [ 2097.950619] [sched_delayed] sched: RT throttling activated [ 2098.755838] type=1403 audit(1340040161.510:4): policy loaded auid=0 ses=1 Updating : sudo-1.8.3p1-7.fc17.armv5tel Expected results: no warning Additional info:
That just means we removed the transition rule from unconfined_t to obex_t.