-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 11/21/2013 03:13 PM, Vitaly Kuznetsov wrote:
> Matthew Miller <mat...@fedoraproject.org> writes:
> 
>> On Thu, Nov 21, 2013 at 01:30:15PM +0100, Vitaly Kuznetsov wrote:
>>> I ran basic tests agains them and they're ok. The only issue I still
>>> see is wrong SELinux context for several files:
>>> 
>>> # restorecon -Rvn -e/dev -e/proc -e/sys -e/run -e/tmp/ / restorecon
>>> reset /var/cache/yum context
>>> system_u:object_r:file_t:s0->system_u:object_r:rpm_var_cache_t:s0 
>>> restorecon reset /var/log/boot.log context
>>> system_u:object_r:var_log_t:s0->system_u:object_r:plymouthd_var_log_t:s0
>>>
>>> 
restorecon reset /boot/extlinux/ldlinux.sys context
system_u:object_r:file_t:s0->system_u:object_r:boot_t:s0
>> 
>> That's weird. We're running fixfiles at the end of the build process to 
>> clean up anything like that.
> 
> I looked into kickstart, you do '/usr/sbin/fixfiles -R -a restore'. I tried
> running it manually on fresh instance:
> 
> # /usr/sbin/fixfiles -R -a restore 75k/sbin/restorecon set context 
> /boot/extlinux/ldlinux.sys->system_u:object_r:boot_t:s0 failed:'Operation
> not permitted' 80k/sbin/restorecon set context 
> /boot/extlinux/ldlinux.sys->system_u:object_r:boot_t:s0 failed:'Operation
> not permitted' 177k/sbin/restorecon set context 
> /boot/extlinux/ldlinux.sys->system_u:object_r:boot_t:s0 failed:'Operation
> not permitted'
> 
> However /boot/extlinux/ldlinux.sys is the only file needs fixind after 
> this:
> 
> # restorecon -Rvn -e/dev -e/proc -e/sys -e/run -e/tmp/ / restorecon reset
> /boot/extlinux/ldlinux.sys context 
> system_u:object_r:file_t:s0->system_u:object_r:boot_t:s0
> 
> Anyway, https://bugzilla.redhat.com/show_bug.cgi?id=1033274 as suggested by
> dwalsh)
> 
Any change something is mounted on top of these files/directories when the
fixfiles is run.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.15 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlKPXq8ACgkQrlYvE4MpobPw7wCeMz5w3mGE9PRI+qRJxQTDmpK3
gzYAoN2VWaVI5iGpxkVN/vTA+JTfKWoh
=WycT
-----END PGP SIGNATURE-----
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

Reply via email to