ovirt-node-iso SELinux build problems

[Fabian Deutsch]

Hey!

Am Dienstag, den 16.04.2013, 09:24 +0800 schrieb bigclouds:
> hi,fabian deutsch:
> i have 2 tips.

First thanks for giving tips!

> 1.run sestatus,  check the mount point of "SELinuxfs mount", in most
> case it is /selinux, not "/sys/fs/selinux".

I verified that the mountpoint of (sys/fs/selinux is selinux (fs).

> 2.install audit-2.2-2.el6.x86_64

Could you say what is so special baout this version? :)
I can only pass this on to infra members as I don't have access to the
builders.

> 3.i do not know where to find ovirt.te. it seems passwd_file_t never
> been defined.

I suppose this happens because of the earlier error:
policydb magic number 0x000008 does not match expected magic
(so the policydb couldn't be read and therefor the type is unknown)

Bug https://bugzilla.redhat.com/show_bug.cgi?id=952352 is open to track
this problem.

Greetings
fabian

>  
> 
> thanks
> 
> 
> 
> 
> 
> 
> 
> 
> At 2013-04-16 02:24:35,"Fabian Deutsch" <fabiand at redhat.com> wrote:
> >Hey,
> >
> >for some time now we - the ovirt-node-iso builds - are seeing some
> >selinux related build problems. They look similar to [1]:
> >
> >ERROR: policydb magic number 0x000008 does not match expected magic
> >number 0xf97cff8c or 0xf97cff8d
> >ERROR: Unable to open policy /sys/fs/selinux/policy.
> >Traceback (most recent call last):
> >  File "/sbin/semanage", line 25, in <module>
> >    import seobject
> >  File "/usr/lib64/python2.7/site-packages/seobject.py", line 27, in <module>
> >    import sepolicy
> >  File "/usr/lib64/python2.7/site-packages/sepolicy/__init__.py", line 65, in <module>
> >    raise e
> >ValueError: Failed to read /sys/fs/selinux/policy policy file
> >
> >A first guess was that the policydb of the host didn't match the
> >policydb beeing used in the livecd image. But it seems as if this is not
> >the case, as the problems still occur.
> >I'm no selinux expert but maybe bug #817485 (RHBz) contains a fix for
> >this and I'd like to try this.
> >The following two packages must be installed and be updated to the most
> >recent version:
> >
> >yum -y update setools-console setools-libs-python
> >
> >Could someone install and/or check if they are updated to the latest
> >versions on our two F18 builders?
> >
> >Thanks
> >fabian
> >
> >--
> >[1]
> >http://jenkins.ovirt.org/view/ovirt_node/job/ovirt-node-iso-devel/2015/consoleFull
> >[2] https://bugzilla.redhat.com/show_bug.cgi?id=817485
> >
> >_______________________________________________
> >Infra mailing list
> >Infra at ovirt.org
> >http://lists.ovirt.org/mailman/listinfo/infra
> 
>