Sorry to belabor this....but running strict/enforcing,
here is a subset of the messages from 'yum update'
of today's Rawhide:
gnome-vfs2 100 % done 3/161
/sbin/ldconfig: Renaming of /etc/ld.so.cache~ to /etc/ld.so.cache
failed: Permission denied
error: %post(gnome-vfs2-2.8.2-1.i386) scriptlet failed, exit status 1
gail 100 % done 4/161
mozilla-nspr 100 % done 5/161
error: %post(mozilla-nspr-1.7.3-13.i386) scriptlet failed, exit status 1
eel2 100 % done 6/161
rpm-libs 100 % done 7/161
ImageMagick 100 % done 8/161
grep 100 % done 9/161
pam 100 % done 10/161
/sbin/ldconfig: Renaming of /etc/ld.so.cache~ to /etc/ld.so.cache
failed: Permission denied
mozilla-nss 100 % done 11/161
error: %post(mozilla-nss-1.7.3-13.i386) scriptlet failed, exit status 1
mozilla 100 % done 12/161
sane-backends 100 % done 13/161
rpm 100 % done 14/161
/sbin/ldconfig: Renaming of /etc/ld.so.cache~ to /etc/ld.so.cache
failed: Permission denied
cups-libs 100 % done 15/161
libuser 100 % done 16/161
/sbin/ldconfig: Renaming of /etc/ld.so.cache~ to /etc/ld.so.cache
failed: Permission denied
error: %post(libuser-0.52.5-1.i386) scriptlet failed, exit status 1
ImageMagick-c++ 100 % done 17/161
nautilus 100 % done 78/161
/sbin/ldconfig: Renaming of /etc/ld.so.cache~ to /etc/ld.so.cache
failed: Permission denied
nautilus-cd-burner 100 % done 79/161
/sbin/ldconfig: Renaming of /etc/ld.so.cache~ to /etc/ld.so.cache
failed: Permission denied
control-center 100 % done 80/161
/sbin/ldconfig: Renaming of /etc/ld.so.cache~ to /etc/ld.so.cache
failed: Permission denied
rpm -V of the above packages is non-eventful, except for libuser:
.......T. c /etc/libuser.conf
..5....T. /usr/bin/lchfn
..5....T. /usr/bin/lchsh
..5....T. /usr/lib/libuser.so.1.1.1
..5....T. /usr/lib/libuser/libuser_files.so
..5....T. /usr/lib/libuser/libuser_ldap.so
..5....T. /usr/lib/libuser/libuser_shadow.so
S.5....T. /usr/lib/python2.3/site-packages/libusermodule.so
..5....T. /usr/sbin/lchage
..5....T. /usr/sbin/lgroupadd
..5....T. /usr/sbin/lgroupdel
..5....T. /usr/sbin/lgroupmod
..5....T. /usr/sbin/lid
..5....T. /usr/sbin/lnewusers
..5....T. /usr/sbin/lpasswd
..5....T. /usr/sbin/luseradd
..5....T. /usr/sbin/luserdel
..5....T. /usr/sbin/lusermod
.......T. /usr/share/locale/ar/LC_MESSAGES/libuser.mo
<<<SNIP files with just T changes>>>
Is this safe to ignore? Should I reinstall offending packages
running in permissive mode? Other?
tom
On Tue, 12 Oct 2004 10:44:32 -0400, Jeff Johnson <n3npq(a)nc.rr.com> wrote:
Stephen Smalley wrote:
>On Tue, 2004-10-12 at 10:03, Jeff Johnson wrote:
>
>
>>Better still, how about libselinux_execve() clone. no reason why libselinux
>>should not do the execve as well afaict.
>>
>>
>
>Hmmm..that lends itself to interface spread, as people will then want
>libselinux_execl*, libselinux_execvp, ... and possibly even
>libselinux_popen, as opposed to just a setexeccon-like function that can
>be called prior to any of those normal calls. We actually had
>execve_secure() in the old SELinux API, but were forced to migrate to
>setexeccon();execve(); as part of mainstream inclusion.
>
>
Interface spread appreciated, but whether application or library does
execve(2) is
pehaps not the important issue.
A hook called afetr fork(2) to permit libselinux to change the execution
environment opaquely
is what rpm seeks, execve(2) clone is a rather natural way to define the
necessary API imho.
But if you want rpm (or application) to do its own execve(2), well, that
works too. The issue
for rpm is opaqueness, i.e. not compiling "rpm_script_t" and the
decision algorithm into rpmlib.
73 de Jeff
--
fedora-selinux-list mailing list
fedora-selinux-list(a)redhat.com
http://www.redhat.com/mailman/listinfo/fedora-selinux-list
--
Tom London