[CentOS] sandbox complaint

Thu May 27 20:32:09 UTC 2010
m.roth at 5-cent.us <m.roth at 5-cent.us>

Daniel wrote:
> On 05/27/2010 04:12 PM, m.roth at 5-cent.us wrote:
>> Daniel wrote:
>>> On 05/27/2010 02:38 PM, m.roth at 5-cent.us wrote:
>>>> Daniel wrote:
>>>>> On 05/27/2010 12:19 PM, m.roth at 5-cent.us wrote:
>>>>>> Daniel wrote:
>>>>>>> On 05/27/2010 12:00 PM, m.roth at 5-cent.us wrote:
>>>>>>>> Daniel wrote:
>>>>>>>>> On 05/27/2010 11:49 AM, m.roth at 5-cent.us wrote:
>>>>>>>>>> Updating a system from CentOS 5.4 (current) to 5.5, and I see:
>>>>>>>>>>
>>>>>>>>>> libsepol.scope_copy_callback: zosremote: Duplicate declaration
>>>>>>>>>> in
>>>>>>>>>> module:
>>>>>>>>>> type/attribute zos_remote_t
>>>>>>>>>> libsemanage.semanage_link_sandbox: Link packages failed
>>>>>>>>>> semodule:  Failed!
>>>>>> <snip>
>>>>> Remove all audispd-zos-remote.pp and zos_remote.pp
>>>>>
>>>>> We ship zosremote.pp
>>>>
>>>> Ok... I can do that, but are you saying to just rm it, and not
>>>> whatever package it came in?
<snip>
>>> I think you will find that it does not happen for everyone else and
>>> that these files do not belong to other packages.  I have a feeling that
>>> something went wrong on an update that left these files around.
>>>
>> Hmmm...but I don't know if rm'ing them will work, if they're in the d/b.
>> So I suppose I'll have to find the package that put them there...
>> <time passes>
>> Ok, anyone on the CentOS list: does *anyone* know where this came from?
>> It' sin the directory provided by
>> selinux-policy-targeted-2.4.6-279.el5.noarch, but there's no zos_remote
>> in the package.
>>
> Trust me on this, I know what I am talking about.
>
> Just remove them.  They were put there by previous versions of audit and
> maybe selinux-policy.  If you are concerned you can squirrel them away.
>
> selinux-policy takes all pp files in the active directory and compiles
> them into a policy module.

Ok, I believe you. I also found the same .pp in .../previous/, and diff
said no difference, so no problem rm'ing them.

        mark