Gentoo Archives: gentoo-hardened

From: Sven Vermeulen <swift@g.o>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] selinux-base-policy merge failure
Date: Sat, 01 Mar 2014 11:09:25
Message-Id: 20140301110917.GA28996@gentoo.org
In Reply to: [gentoo-hardened] selinux-base-policy merge failure by Erik Mackdanz
1 On Thu, Feb 27, 2014 at 09:02:54PM -0600, Erik Mackdanz wrote:
2 > I'm hitting symptoms as described in the "Policy Store is Corrupt" section
3 > of the troubleshooting page (
4 > http://www.gentoo.org/proj/en/hardened/selinux/selinux-handbook.xml?part=2&chap=6
5 > )
6 >
7 > msi erik # semodule -n -B
8 > libsemanage.semanage_link_sandbox: Could not access sandbox base file
9 > /etc/selinux/strict/modules/tmp/base.pp. (No such file or directory).
10 > semodule: Failed!
11 >
12 > As directed, I re-emerge my sec-policy packages:
13 > ...
14 > FEATURES="-selinux" emerge -1av $(qlist -IC sec-policy)
15 > ...
16 >
17 > however selinux-base-policy fails. It gets through the sandbox install but
18 > fails at the merge with:
19 >
20 > Error opening /etc/selinux/strict/contexts/files/file_contexts.local: No
21 > such file or directory
22 > libsemanage.sefcontext_compile: sefcontext_compile returned error code 255.
23 > Compiling /etc/selinux/strict/contexts/files/file_contexts.local
24 > libsemanage.semanage_install_active: Could not copy
25 > /etc/selinux/strict/modules/active/file_contexts.homedirs to
26 > /etc/selinux/strict/contexts/files/file_contexts.homedirs. (No such file or
27 > directory)
28 > semodule: failed!
29 >
30 > Any ideas? I'm sure this package merged successfully a couple days ago.
31
32 Which directories do exist (these are all "no such file or directory" so it
33 would be good to know if they exist and if not, if their parent directories
34 exist, etc.)
35
36 Most of the directories are build by the selinux-base package.
37
38 Wkr,
39 Sven Vermeulen