[gentoo-hardened] Problems emerging new hardened sources

[Tiago Lima]

Hi,

I have a server with SE Linux using and old policy (from 2003 12 25 :). I 
havent synced the system for quite some time and I decided to sync it 
today...

Some system info:

	*  sec-policy/selinux-base-policy
	      Latest version available: 20040202
	      Latest version installed: 20031225
	      Size of downloaded files: 59 kB
	      Homepage:    http://www.gentoo.org/proj/en/hardened/selinux/
	      Description: Gentoo base policy for SELinux
	      License:     GPL-2

	*  sys-kernel/hardened-sources
	      Latest version available: 2.4.24
	      Latest version installed: 2.4.22-r2
	      Size of downloaded files: 31,081 kB
	      Homepage:    http://www.gentoo.org/proj/en/hardened/
	      Description: Special Security Hardened Gentoo Linux Kernel
	      License:     GPL-2

After the sync I tried to "emerge -u hardened-sources" and when on the install 
fase it appear this:

make[1]: Leaving directory 
`/var/tmp/portage/hardened-sources-2.4.24/work/linux-2.4.24-hardened/Documentation/DocBook'
>>> version.h compiled successfully.
>>> Source unpacked.
 
>>> Install hardened-sources-2.4.24
into /var/tmp/portage/hardened-sources-2.4.24/image/ category sys-kernel
>>> Copying sources...
man:
prepallstrip:
strip:
strip:
>>> Completed installing into /var/tmp/portage/hardened-sources-2.4.24/image/
 
>>> Merging sys-kernel/hardened-sources-2.4.24 to /
sfperms
selinux
>>> Setting SELinux security labels
make: Entering directory `/etc/security/selinux/src/policy'
cat file_contexts/types.fc file_contexts/program/bootloader.fc 
file_contexts/program/checkpolicy.fc file_contexts/program/chkpwd.fc 
file_contexts/program/chroot.fc file_contexts/program/crack.fc 
file_contexts/program/crond.fc file_contexts/program/crontab.fc 
file_contexts/program/devfsd.fc file_contexts/program/dhcpc.fc 
file_contexts/program/fsadm.fc file_contexts/program/getty.fc 
file_contexts/program/hwclock.fc file_contexts/program/ifconfig.fc 
file_contexts/program/inetd.fc file_contexts/program/init.fc 
file_contexts/program/initrc.fc file_contexts/program/iptables.fc 
file_contexts/program/ldconfig.fc file_contexts/program/load_policy.fc 
file_contexts/program/login.fc file_contexts/program/mkinitrd.fc 
file_contexts/program/modutil.fc file_contexts/program/mount.fc 
file_contexts/program/mta.fc file_contexts/program/netutils.fc 
file_contexts/program/newrole.fc file_contexts/program/nscd.fc 
file_contexts/program/ntpd.fc file_contexts/program/opt.fc 
file_contexts/program/pamconsole.fc file_contexts/program/passwd.fc 
file_contexts/program/ping.fc file_contexts/program/portage.fc 
file_contexts/program/pppd.fc file_contexts/program/rsyncd.fc 
file_contexts/program/selopt.fc file_contexts/program/setfiles.fc 
file_contexts/program/ssh.fc file_contexts/program/su.fc 
file_contexts/program/syslogd.fc file_contexts/program/tcpd.fc 
file_contexts/program/useradd.fc file_contexts/users.fc 
> /var/tmp/portage/hardened-sources-2.4.24/temp/file_contexts
make: Leaving directory `/etc/security/selinux/src/policy'
/usr/sbin/setfiles:  read 534 specifications
/usr/sbin/setfiles:  invalid context system_u:object_r:mnt_t on line number 49
/usr/sbin/setfiles:  invalid context system_u:object_r:mnt_t on line number 50
/usr/sbin/setfiles:  invalid context system_u:object_r:cpu_device_t on line 
number 115
/usr/sbin/setfiles:  invalid context system_u:object_r:scsi_generic_device_t 
on line number 132
/usr/sbin/setfiles:  invalid context system_u:object_r:tape_device_t on line 
number 200
/usr/sbin/setfiles:  invalid context system_u:object_r:tape_device_t on line 
number 201
/usr/sbin/setfiles:  invalid context system_u:object_r:tape_device_t on line 
number 202
/usr/sbin/setfiles:  invalid context system_u:object_r:tape_device_t on line 
number 203
/usr/sbin/setfiles:  invalid context system_u:object_r:tape_device_t on line 
number 204
/usr/sbin/setfiles:  invalid context system_u:object_r:tape_device_t on line 
number 205
Exiting after 10 errors.
 
!!! ERROR: sys-kernel/hardened-sources-2.4.24 failed.
!!! Function dyn_preinst, Line 909, Exitcode 1
!!! Failed to set SELinux security labels.
 
!!! FAILED preinst: 1

Am I missing something here?

Thanks in advance,
	Tiago Lima


--
gentoo-hardened@g.o mailing list