After a month's worth of rawhide updates, I noticed that ps is no longer reporting the contexts for processes:
[root@localhost audit]# selinuxenabled && echo $? 0 [root@localhost audit]# rpm -q selinux-policy-targeted selinux-policy-targeted-3.0.5-11.fc8 [root@localhost ~]# ps auwxZ | tail - gdm 2422 0.2 5.7 80604 29540 ? Ss 21:58 0:03 /usr/libexec/gdmgreeter --gtk-module=gail:atk-bridge:/usr/lib/gtk-2.0/modules/libkeymouselistener - gdm 2424 0.4 0.7 13272 3956 ? S 21:58 0:05 /usr/libexec/at-spi-registryd - gdm 2426 0.0 0.5 38748 2700 ? Ssl 21:58 0:00 /usr/libexec/bonobo-activation-server --ac-activate --ior-output-fd=13
Any ideas what may have caused this to stop working?
--Wart
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Wart wrote:
After a month's worth of rawhide updates, I noticed that ps is no longer reporting the contexts for processes:
[root@localhost audit]# selinuxenabled && echo $? 0 [root@localhost audit]# rpm -q selinux-policy-targeted selinux-policy-targeted-3.0.5-11.fc8 [root@localhost ~]# ps auwxZ | tail
gdm 2422 0.2 5.7 80604 29540 ? Ss 21:58 0:03 /usr/libexec/gdmgreeter
--gtk-module=gail:atk-bridge:/usr/lib/gtk-2.0/modules/libkeymouselistener
gdm 2424 0.4 0.7 13272 3956 ? S 21:58 0:05 /usr/libexec/at-spi-registryd
gdm 2426 0.0 0.5 38748 2700 ? Ssl 21:58 0:00 /usr/libexec/bonobo-activation-server
--ac-activate --ior-output-fd=13
Any ideas what may have caused this to stop working?
--Wart
-- fedora-selinux-list mailing list fedora-selinux-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-selinux-list
Works for me. Also you selinux-policy is out of date.
# rpm -q selinux-policy selinux-policy-3.0.6-1.fc8 # rpm -qf /bin/ps procps-3.2.7-14.fc8
ps auwxZ | head -10 LABEL USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND system_u:system_r:init_t:s0 root 1 0.0 0.0 2152 632 ? Ss Aug20 0:07 init [5] system_u:system_r:kernel_t:s0 root 2 0.0 0.0 0 0 ? S< Aug20 0:00 [kthreadd] system_u:system_r:kernel_t:s0 root 3 0.0 0.0 0 0 ? S< Aug20 0:00 [migration/0] system_u:system_r:kernel_t:s0 root 4 0.0 0.0 0 0 ? S< Aug20 0:00 [ksoftirqd/0] system_u:system_r:kernel_t:s0 root 5 0.0 0.0 0 0 ? S< Aug20 0:00 [watchdog/0]
Daniel J Walsh wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Wart wrote:
After a month's worth of rawhide updates, I noticed that ps is no longer reporting the contexts for processes:
[root@localhost audit]# selinuxenabled && echo $? 0 [root@localhost audit]# rpm -q selinux-policy-targeted selinux-policy-targeted-3.0.5-11.fc8 [root@localhost ~]# ps auwxZ | tail
gdm 2422 0.2 5.7 80604 29540 ? Ss 21:58 0:03 /usr/libexec/gdmgreeter
--gtk-module=gail:atk-bridge:/usr/lib/gtk-2.0/modules/libkeymouselistener
gdm 2424 0.4 0.7 13272 3956 ? S 21:58 0:05 /usr/libexec/at-spi-registryd
gdm 2426 0.0 0.5 38748 2700 ? Ssl 21:58 0:00 /usr/libexec/bonobo-activation-server
--ac-activate --ior-output-fd=13
Any ideas what may have caused this to stop working?
--Wart
-- fedora-selinux-list mailing list fedora-selinux-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-selinux-list
Works for me. Also you selinux-policy is out of date.
# rpm -q selinux-policy selinux-policy-3.0.6-1.fc8 # rpm -qf /bin/ps procps-3.2.7-14.fc8
ps auwxZ | head -10 LABEL USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND system_u:system_r:init_t:s0 root 1 0.0 0.0 2152 632 ? Ss Aug20 0:07 init [5] system_u:system_r:kernel_t:s0 root 2 0.0 0.0 0 0 ? S< Aug20 0:00 [kthreadd] system_u:system_r:kernel_t:s0 root 3 0.0 0.0 0 0 ? S< Aug20 0:00 [migration/0] system_u:system_r:kernel_t:s0 root 4 0.0 0.0 0 0 ? S< Aug20 0:00 [ksoftirqd/0] system_u:system_r:kernel_t:s0 root 5 0.0 0.0 0 0 ? S< Aug20 0:00 [watchdog/0]
Still no luck. I restored the machine to a previously working state, and then upgraded both procps and *selinux*. Immediately after the upgrade ps stopped showing contexts again.
[...] Updated: libselinux.i386 0:2.0.31-2.fc8 libselinux-python.i386 0:2.0.31-2.fc8 selinux-policy.noarch 0:3.0.6-3.fc8 selinux-policy-devel.noarch 0:3.0.6-3.fc8 selinux-policy-targeted.noarch 0:3.0.6-3.fc8 Dependency Updated: libsemanage.i386 0:2.0.4-1.fc8 libsepol.i386 0:2.0.7-1.fc8 policycoreutils.i386 0:2.0.25-2.fc8 policycoreutils-gui.i386 0:2.0.25-2.fc8 Complete! [root@localhost ~]# ps auwxZ | head LABEL USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND - root 1 0.0 0.1 2108 624 ? Ss 02:30 0:02 init [5] - root 2 0.0 0.0 0 0 ? S< 02:30 0:00 [kthreadd] - root 3 0.0 0.0 0 0 ? S< 02:30 0:00 [migration/0] - root 4 0.0 0.0 0 0 ? S< 02:30 0:00 [ksoftirqd/0] - root 5 0.0 0.0 0 0 ? S< 02:30 0:00 [watchdog/0] - root 6 0.0 0.0 0 0 ? S< 02:30 0:00 [events/0] - root 7 0.0 0.0 0 0 ? S< 02:30 0:00 [khelper] - root 58 0.0 0.0 0 0 ? S< 02:30 0:00 [kblockd/0] - root 61 0.0 0.0 0 0 ? S< 02:30 0:00 [kacpid] [root@localhost ~]# rpm -q selinux-policy selinux-policy-3.0.6-3.fc8 [root@localhost ~]# rpm -q procps procps-3.2.7-15.1.fc8
When I get some time I'll start with a fresh F-7 install and then upgrade to rawhide. Maybe some intermediate update broke things beyond repair.
--Wart
Wart wrote: [...]
Still no luck. I restored the machine to a previously working state, and then upgraded both procps and *selinux*. Immediately after the upgrade ps stopped showing contexts again.
[...] Updated: libselinux.i386 0:2.0.31-2.fc8 libselinux-python.i386 0:2.0.31-2.fc8 selinux-policy.noarch 0:3.0.6-3.fc8 selinux-policy-devel.noarch 0:3.0.6-3.fc8 selinux-policy-targeted.noarch 0:3.0.6-3.fc8 Dependency Updated: libsemanage.i386 0:2.0.4-1.fc8 libsepol.i386 0:2.0.7-1.fc8 policycoreutils.i386 0:2.0.25-2.fc8 policycoreutils-gui.i386 0:2.0.25-2.fc8 Complete! [root@localhost ~]# ps auwxZ | head LABEL USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND - root 1 0.0 0.1 2108 624 ? Ss 02:30 0:02 init [5] - root 2 0.0 0.0 0 0 ? S< 02:30 0:00 [kthreadd] - root 3 0.0 0.0 0 0 ? S< 02:30 0:00 [migration/0] - root 4 0.0 0.0 0 0 ? S< 02:30 0:00 [ksoftirqd/0] - root 5 0.0 0.0 0 0 ? S< 02:30 0:00 [watchdog/0] - root 6 0.0 0.0 0 0 ? S< 02:30 0:00 [events/0] - root 7 0.0 0.0 0 0 ? S< 02:30 0:00 [khelper] - root 58 0.0 0.0 0 0 ? S< 02:30 0:00 [kblockd/0] - root 61 0.0 0.0 0 0 ? S< 02:30 0:00 [kacpid] [root@localhost ~]# rpm -q selinux-policy selinux-policy-3.0.6-3.fc8 [root@localhost ~]# rpm -q procps procps-3.2.7-15.1.fc8
When I get some time I'll start with a fresh F-7 install and then upgrade to rawhide. Maybe some intermediate update broke things beyond repair.
I think I found the problem.
'ps' tries to find and open 'libselinux.so'. At some point this library was moved from libselinux to libselinux-devel. Since I didn't have libselinux-devel installed, ps failed to load the library and find the selinux context information.
Installing libselinux-devel fixes the problem.
I see three possible ways to fix this:
1) Move libselinux.so back to libselinux 2) Add 'Requires: libselinux-devel' to procps 3) Fix ps to load libselinux.so.1 instead of the unversioned .so file.
--Wart
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Wart wrote:
Wart wrote: [...]
Still no luck. I restored the machine to a previously working state, and then upgraded both procps and *selinux*. Immediately after the upgrade ps stopped showing contexts again.
[...] Updated: libselinux.i386 0:2.0.31-2.fc8 libselinux-python.i386 0:2.0.31-2.fc8 selinux-policy.noarch 0:3.0.6-3.fc8 selinux-policy-devel.noarch 0:3.0.6-3.fc8 selinux-policy-targeted.noarch 0:3.0.6-3.fc8 Dependency Updated: libsemanage.i386 0:2.0.4-1.fc8 libsepol.i386 0:2.0.7-1.fc8 policycoreutils.i386 0:2.0.25-2.fc8 policycoreutils-gui.i386 0:2.0.25-2.fc8 Complete! [root@localhost ~]# ps auwxZ | head LABEL USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND - root 1 0.0 0.1 2108 624 ? Ss 02:30 0:02 init [5] - root 2 0.0 0.0 0 0 ? S< 02:30 0:00 [kthreadd] - root 3 0.0 0.0 0 0 ? S< 02:30 0:00 [migration/0] - root 4 0.0 0.0 0 0 ? S< 02:30 0:00 [ksoftirqd/0] - root 5 0.0 0.0 0 0 ? S< 02:30 0:00 [watchdog/0] - root 6 0.0 0.0 0 0 ? S< 02:30 0:00 [events/0] - root 7 0.0 0.0 0 0 ? S< 02:30 0:00 [khelper] - root 58 0.0 0.0 0 0 ? S< 02:30 0:00 [kblockd/0] - root 61 0.0 0.0 0 0 ? S< 02:30 0:00 [kacpid] [root@localhost ~]# rpm -q selinux-policy selinux-policy-3.0.6-3.fc8 [root@localhost ~]# rpm -q procps procps-3.2.7-15.1.fc8
When I get some time I'll start with a fresh F-7 install and then upgrade to rawhide. Maybe some intermediate update broke things beyond repair.
I think I found the problem.
'ps' tries to find and open 'libselinux.so'. At some point this library was moved from libselinux to libselinux-devel. Since I didn't have libselinux-devel installed, ps failed to load the library and find the selinux context information.
Installing libselinux-devel fixes the problem.
I see three possible ways to fix this:
- Move libselinux.so back to libselinux
- Add 'Requires: libselinux-devel' to procps
- Fix ps to load libselinux.so.1 instead of the unversioned .so file.
--Wart
I will move it back to libselinux package.
Daniel J Walsh wrote:
Wart wrote:
Wart wrote: [...]
Still no luck. I restored the machine to a previously working state, and then upgraded both procps and *selinux*. Immediately after the upgrade ps stopped showing contexts again.
[...] Updated: libselinux.i386 0:2.0.31-2.fc8 libselinux-python.i386 0:2.0.31-2.fc8 selinux-policy.noarch 0:3.0.6-3.fc8 selinux-policy-devel.noarch 0:3.0.6-3.fc8 selinux-policy-targeted.noarch 0:3.0.6-3.fc8 Dependency Updated: libsemanage.i386 0:2.0.4-1.fc8 libsepol.i386 0:2.0.7-1.fc8 policycoreutils.i386 0:2.0.25-2.fc8 policycoreutils-gui.i386 0:2.0.25-2.fc8 Complete! [root@localhost ~]# ps auwxZ | head LABEL USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND - root 1 0.0 0.1 2108 624 ? Ss 02:30 0:02 init [5] - root 2 0.0 0.0 0 0 ? S< 02:30 0:00 [kthreadd] - root 3 0.0 0.0 0 0 ? S< 02:30 0:00 [migration/0] - root 4 0.0 0.0 0 0 ? S< 02:30 0:00 [ksoftirqd/0] - root 5 0.0 0.0 0 0 ? S< 02:30 0:00 [watchdog/0] - root 6 0.0 0.0 0 0 ? S< 02:30 0:00 [events/0] - root 7 0.0 0.0 0 0 ? S< 02:30 0:00 [khelper] - root 58 0.0 0.0 0 0 ? S< 02:30 0:00 [kblockd/0] - root 61 0.0 0.0 0 0 ? S< 02:30 0:00 [kacpid] [root@localhost ~]# rpm -q selinux-policy selinux-policy-3.0.6-3.fc8 [root@localhost ~]# rpm -q procps procps-3.2.7-15.1.fc8
When I get some time I'll start with a fresh F-7 install and then upgrade to rawhide. Maybe some intermediate update broke things beyond repair.
I think I found the problem.
'ps' tries to find and open 'libselinux.so'. At some point this library was moved from libselinux to libselinux-devel. Since I didn't have libselinux-devel installed, ps failed to load the library and find the selinux context information.
Installing libselinux-devel fixes the problem.
I see three possible ways to fix this:
- Move libselinux.so back to libselinux
- Add 'Requires: libselinux-devel' to procps
- Fix ps to load libselinux.so.1 instead of the unversioned .so file.
--Wart
I will move it back to libselinux package.
The procps owner is also going to change ps to load libselinux.so.1 (BZ# 255441)
Both of these changes should make it far less likely to be a problem again.
Thanks,
--Wart
selinux@lists.fedoraproject.org