Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.
RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 871156

Summary: libsemanage.dbase_llist_iterate: could not iterate over records (No such file or directory).
Product: Red Hat Enterprise Linux 6 Reporter: Shawn Wells <swells>
Component: selinux-policyAssignee: Miroslav Grepl <mgrepl>
Status: CLOSED NOTABUG QA Contact: BaseOS QE Security Team <qe-baseos-security>
Severity: medium Docs Contact:
Priority: high    
Version: 6.3CC: degts, dwalsh, ebenes, mmalik, mvadkert
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-11-07 11:34:46 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 840898    
Attachments:
Description Flags
Kickstart to replicate the issue. none

Description Shawn Wells 2012-10-29 18:49:59 UTC
Description of problem:
I'm playing around with installing our RHEL 6.2 Common Criteria build and during the kickstart process I receive the following error. These come up immediately after creating an administrative user account and entering its password:

passwd: all authentication tokens updated successfully.
libsepol.mls_from_string: invalid MLS context s0-s15:c0.c1023 (No such file or directory).
libsepol.mls_from_string: could not construct mls context structure (No such file or directory).
libsemanage.validate_handler: seuser mapping [swells -> (staff_u, s0-s15:c0.c1023)] is invalid (No such file or directory).
libsemanage.dbase_llist_iterate: could not iterate over records (No such file or directory).
/usr/sbin/semanage: Could not commit semanage transaction 


Version-Release number of selected component (if applicable):
RHEL6

How reproducible:
Always

Steps to Reproduce:
1. Kickstart a machine with kickstart file included in CC RPM
2. When prompted, enter user information
  
Actual results:
- Users never get added
- Receive the following errors: 
passwd: all authentication tokens updated successfully.
libsepol.mls_from_string: invalid MLS context s0-s15:c0.c1023 (No such file or directory).
libsepol.mls_from_string: could not construct mls context structure (No such file or directory).
libsemanage.validate_handler: seuser mapping [swells -> (staff_u, s0-s15:c0.c1023)] is invalid (No such file or directory).
libsemanage.dbase_llist_iterate: could not iterate over records (No such file or directory).
/usr/sbin/semanage: Could not commit semanage transaction 



Expected results:
- Users should be added
- No errors

Additional info:

Comment 3 Shawn Wells 2012-10-29 22:52:03 UTC
Works fine on RHEL6 when issued as a standard command, errors (from my experience) only during the CC install

Comment 6 Shawn Wells 2012-10-29 23:25:13 UTC
I went and (re)validated that I'm installing the specific CCC versions of packages as outlined in the install guide. Here are my findings, just incase someone sees something I missed.

Also, I am using RHEL 6.2 as the install host.

For the packages, here's what's in place. I just stepped through it re-validating the version numbers:
>
> ### RPM list autogenerated from src/rpms.lst
> RPMS_NEEDED='
> cc-eal4-config-rhel62-0.33-1.el6_2.noarch.rpm
> kernel-2.6.32-220.4.2.el6.x86_64.rpm
http://10.15.69.78/webinstall/kernel-2.6.32-220.4.2.el6.x86_64.rpm
> kernel-firmware-2.6.32-220.4.2.el6.noarch.rpm
http://10.15.69.78/webinstall/kernel-firmware-2.6.32-220.4.2.el6.noarch.rpm
> kernel-headers-2.6.32-220.4.2.el6.x86_64.rpm
http://10.15.69.78/webinstall/kernel-headers-2.6.32-220.4.2.el6.x86_64.rpm
> kernel-devel-2.6.32-220.4.2.el6.x86_64.rpm
http://10.15.69.78/webinstall/kernel-devel-2.6.32-220.4.2.el6.x86_64.rpm
> libvirt-0.9.4-23.el6_2.6.x86_64.rpm
http://10.15.69.78/webinstall/libvirt-0.9.4-23.el6_2.6.x86_64.rpm
> libvirt-python-0.9.4-23.el6_2.6.x86_64.rpm
http://10.15.69.78/webinstall/libvirt-python-0.9.4-23.el6_2.6.x86_64.rpm
> libvirt-client-0.9.4-23.el6_2.6.x86_64.rpm
http://10.15.69.78/webinstall/libvirt-client-0.9.4-23.el6_2.6.x86_64.rpm
> selinux-policy-3.7.19-126.el6_2.9.noarch.rpm
http://10.15.69.78/webinstall/selinux-policy-3.7.19-126.el6_2.9.noarch.rpm
> selinux-policy-mls-3.7.19-126.el6_2.9.noarch.rpm
http://10.15.69.78/webinstall/selinux-policy-mls-3.7.19-126.el6_2.9.noarch.rpm
> selinux-policy-targeted-3.7.19-126.el6_2.9.noarch.rpm
http://10.15.69.78/webinstall/selinux-policy-targeted-3.7.19-126.el6_2.9.noarch.rpm
> openssh-clients-5.3p1-70.el6_2.2.x86_64.rpm
http://10.15.69.78/webinstall/openssh-clients-5.3p1-70.el6_2.2.x86_64.rpm
> openssh-server-5.3p1-70.el6_2.2.x86_64.rpm
http://10.15.69.78/webinstall/openssh-server-5.3p1-70.el6_2.2.x86_64.rpm
> openssh-5.3p1-70.el6_2.2.x86_64.rpm
http://10.15.69.78/webinstall/openssh-5.3p1-70.el6_2.2.x86_64.rpm
> policycoreutils-2.0.83-19.21.el6_2.x86_64.rpm
http://10.15.69.78/webinstall/policycoreutils-2.0.83-19.21.el6_2.x86_64.rpm
> policycoreutils-newrole-2.0.83-19.21.el6_2.x86_64.rpm
http://10.15.69.78/webinstall/policycoreutils-newrole-2.0.83-19.21.el6_2.x86_64.rpm
> policycoreutils-python-2.0.83-19.21.el6_2.x86_64.rpm
http://10.15.69.78/webinstall/policycoreutils-python-2.0.83-19.21.el6_2.x86_64.rpm
> dracut-004-256.el6_2.1.noarch.rpm
http://10.15.69.78/webinstall/dracut-004-256.el6_2.1.noarch.rpm
> dracut-fips-004-256.el6_2.1.noarch.rpm
http://10.15.69.78/webinstall/dracut-fips-004-256.el6_2.1.noarch.rpm
> dracut-kernel-004-256.el6_2.1.noarch.rpm
http://10.15.69.78/webinstall/dracut-kernel-004-256.el6_2.1.noarch.rpm
> qemu-img-0.12.1.2-2.209.el6_2.4.x86_64.rpm
http://10.15.69.78/webinstall/qemu-img-0.12.1.2-2.209.el6_2.4.x86_64.rpm
> qemu-kvm-0.12.1.2-2.209.el6_2.4.x86_64.rpm
http://10.15.69.78/webinstall/qemu-kvm-0.12.1.2-2.209.el6_2.4.x86_64.rpm
> openswan-2.6.32-10.el6_2.x86_64.rpm
http://10.15.69.78/webinstall/openswan-2.6.32-10.el6_2.x86_64.rpm
> nss-util-3.13.1-3.el6_2.x86_64.rpm
http://10.15.69.78/webinstall/nss-util-3.13.1-3.el6_2.x86_64.rpm
> nspr-4.8.9-3.el6_2.x86_64.rpm
http://10.15.69.78/webinstall/nspr-4.8.9-3.el6_2.x86_64.rpm
> nss-3.13.1-7.el6_2.x86_64.rpm
http://10.15.69.78/webinstall/nss-3.13.1-7.el6_2.x86_64.rpm
> nss-sysinit-3.13.1-7.el6_2.x86_64.rpm
http://10.15.69.78/webinstall/nss-sysinit-3.13.1-7.el6_2.x86_64.rpm
> openssl-1.0.0-20.el6_2.2.x86_64.rpm
http://10.15.69.78/webinstall/openssl-1.0.0-20.el6_2.2.x86_64.rpm
> openssl-1.0.0-20.el6_2.2.i686.rpm
http://10.15.69.78/webinstall/openssl-1.0.0-20.el6_2.2.i686.rpm
> openssl-devel-1.0.0-20.el6_2.2.x86_64.rpm
http://10.15.69.78/webinstall/openssl-devel-1.0.0-20.el6_2.2.x86_64.rpm
> openssl-devel-1.0.0-20.el6_2.2.i686.rpm
http://10.15.69.78/webinstall/openssl-devel-1.0.0-20.el6_2.2.i686.rpm
> libgcrypt-1.4.5-9.el6_2.2.x86_64.rpm
http://10.15.69.78/webinstall/libgcrypt-1.4.5-9.el6_2.2.x86_64.rpm
> libgcrypt-1.4.5-9.el6_2.2.i686.rpm
http://10.15.69.78/webinstall/libgcrypt-1.4.5-9.el6_2.2.i686.rpm

Comment 14 Shawn Wells 2012-10-31 03:04:08 UTC
Miroslav and I had a chance to further investigate today. Working together we noticed that should someone comment out the "optional" partitions the relabeling fails and causes this issue.

Specifically, we tested /var/log/audit, /home, and /var and were able to replicate this issue. If these partitions are located on their own partition then the installation proceeds without issues.

Comment 15 Shawn Wells 2012-10-31 03:06:28 UTC
Created attachment 635920 [details]
Kickstart to replicate the issue.

Kickstart to replicate the issue. Only difference between this and the one we ship is that the /var/log/audit partition is commented out.