Bug 839032 - f17 SELinux system_u:object_r:firstboot_tmp_t:s0 became invalid during a yum update
Summary: f17 SELinux system_u:object_r:firstboot_tmp_t:s0 became invalid during a yum ...
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy
Version: 17
Hardware: x86_64
OS: Linux
unspecified
low
Target Milestone: ---
Assignee: Miroslav Grepl
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2012-07-10 18:11 UTC by Reartes Guillermo
Modified: 2012-07-11 02:55 UTC (History)
3 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2012-07-11 02:55:59 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)
f17 yum.log (58.95 KB, text/x-log)
2012-07-10 18:11 UTC, Reartes Guillermo
no flags Details
dmesg showing the 'message' (68.62 KB, text/plain)
2012-07-10 18:12 UTC, Reartes Guillermo
no flags Details

Description Reartes Guillermo 2012-07-10 18:11:18 UTC
Created attachment 597405 [details]
f17 yum.log

Description of problem:

I noticed the following in /var/log/messages:

[  898.251589] SELinux:  Context system_u:object_r:firstboot_tmp_t:s0 is not valid (left unmapped).

I have never seen such message before.

# grep system_u:object_r:firstboot_tmp_t:s0  /var/log/messages
Jul  7 18:35:31 stark kernel: [ 1870.931874] SELinux:  Context system_u:object_r:firstboot_tmp_t:s0 became invalid (unmapped).
Jul 10 14:01:49 stark kernel: [  898.236511] SELinux:  Context system_u:object_r:firstboot_tmp_t:s0 is not valid (left unmapped).
Jul 10 14:17:24 stark kernel: [  898.251589] SELinux:  Context system_u:object_r:firstboot_tmp_t:s0 is not valid (left unmapped).

So, at "Jul 7 @ 18:35:31" it happened.

There was a yum update at that time.

Jul 07 18:35:28 Updated: selinux-policy-devel-3.10.0-134.fc17.noarch
Jul 07 18:35:33 Updated: selinux-policy-targeted-3.10.0-134.fc17.noarch
Jul 07 18:35:33 Updated: rsyslog-5.8.10-2.fc17.x86_64
Jul 07 18:35:34 Updated: elfutils-0.154-1.fc17.x86_64

So it happened between selinux-policy-devel-3.10.0-134.fc17.noarch and
selinux-policy-targeted-3.10.0-134.fc17.noarch

Version-Release number of selected component (if applicable):

libselinux.i686          2.1.10-3.fc17   @fedora                     
libselinux.x86_64        2.1.10-3.fc17   @koji-override-0/$releasever
libselinux-devel.x86_64  2.1.10-3.fc17   @fedora                     
libselinux-python.x86_64 2.1.10-3.fc17   @koji-override-0/$releasever
libselinux-utils.x86_64  2.1.10-3.fc17   @koji-override-0/$releasever

selinux-policy.noarch          3.10.0-134.fc17 @updates                    
selinux-policy-devel.noarch    3.10.0-134.fc17 @updates                    
selinux-policy-targeted.noarch 3.10.0-134.fc17 @updates    

How reproducible:
allways 

Steps to Reproduce:
1. update
2. boot & reboot
  
Actual results:
message issued in /var/log/messges. 
no other known issues.

Expected results:
no mesages.

Comment 1 Reartes Guillermo 2012-07-10 18:12:23 UTC
Created attachment 597406 [details]
dmesg showing the 'message'

Comment 2 Daniel Walsh 2012-07-11 02:55:59 UTC
Yes we just removed firstboot_tmp_t from SELinux which causes the kernel to print this message, it was expected.


Note You need to log in before you can comment on or make changes to this bug.