[gentoo-hardened] hardened+selinux failing to emerge grub and/or bin86

[Jason K Larson]

Greetings-

I've got a brand new install in the works but its failing to emerge the
last two packages of the emerge system step.  Namely grub and bin86.

Both result in the following:
INCOMPLETE MERGE: /var/db/pkg/sys-boot/-MERGING-grub-0.96-r1
INCOMPLETE MERGE: /var/db/pkg/sys-devel/-MERGING-bin86-0.16.17

Not sure if this is related or note worthy, but this is a quad xeon
system installing to software raid devices.

This looks like an issue with the segfaulting on chown/chgrp/setfiles
commands but being new to selinux I really have no idea whats going on
wrong. I can run these commands outside of the emerge without errors,
but I'm not sure exactly what I and the ebuild are doing different.

I've searched the forums and bugs listings, and hit google with no
results.  It leads me to think I'm missing something that should be
obvious and just not seeing it.

The ebuild script for grub mentions:
 * Assuming you do not have a separate /boot partition.
which I do actually, and its even mounted as:
/dev/md1 on /boot type ext3 (rw)
I've not run into issues with this before and have several gentoo
systems with a software raid1 for /boot

>From the looks of it my issue isnt related specifically to any package
but as to why emerge is failing to set selinux security labels.  Again,
I'm too new to know a good direction to start poking around in.

Any help or suggestions are appreciated.

Thanks much.

--
Jason K Larson



More details on the grub failure:

prepallstrip:
strip: i686-pc-linux-gnu-strip --strip-unneeded
strip: i686-pc-linux-gnu-strip --strip-unneeded
   sbin/grub
   bin/mbchk
>>> Completed installing grub-0.96-r1 into
/var/tmp/portage/grub-0.96-r1/image/

/usr/lib/portage/bin/ebuild.sh: line 1882:  1846 Segmentation fault
 chown portage:portage "${T}/environment" >&/dev/null
/usr/lib/portage/bin/ebuild.sh: line 1882:  1847 Segmentation fault
 chmod g+w "${T}/environment" >&/dev/null
>>> Merging sys-boot/grub-0.96-r1 to /
 *
 * Assuming you do not have a separate /boot partition.
 *
>>> Setting SELinux security labels
/usr/sbin/setfiles:  labeling files, pretending
/var/tmp/portage/grub-0.96-r1/image is /
/usr/sbin/setfiles:  labeling files under
/var/tmp/portage/grub-0.96-r1/image/
/usr/lib/portage/bin/ebuild.sh: line 1874:  1889 Segmentation fault
 /usr/sbin/setfiles -r "${IMAGE}" "${T}/file_contexts" "${IMAGE}"

!!! ERROR: sys-boot/grub-0.96-r1 failed.
!!! Function dyn_preinst, Line 1246, Exitcode 139
!!! Failed to set SELinux security labels.
!!! If you need support, post the topmost build error, NOT this status
message.

!!! FAILED preinst: 1


similar with bin86:
prepallstrip:
strip: i686-pc-linux-gnu-strip --strip-unneeded
strip: i686-pc-linux-gnu-strip --strip-unneeded
   usr/bin/as86
   usr/bin/ld86
   usr/bin/objdump86
>>> Completed installing bin86-0.16.17 into
/var/tmp/portage/bin86-0.16.17/image/

/usr/lib/portage/bin/ebuild.sh: line 1882:  2233 Segmentation fault
 chown portage:portage "${T}/environment" >&/dev/null
/usr/lib/portage/bin/ebuild.sh: line 1882:  2234 Segmentation fault
 chmod g+w "${T}/environment" >&/dev/null
>>> Merging sys-devel/bin86-0.16.17 to /
>>> Setting SELinux security labels
/usr/sbin/setfiles:  labeling files, pretending
/var/tmp/portage/bin86-0.16.17/image is /
/usr/sbin/setfiles:  labeling files under
/var/tmp/portage/bin86-0.16.17/image/
/usr/lib/portage/bin/ebuild.sh: line 1874:  2253 Segmentation fault
 /usr/sbin/setfiles -r "${IMAGE}" "${T}/file_contexts" "${IMAGE}"

!!! ERROR: sys-devel/bin86-0.16.17 failed.
!!! Function dyn_preinst, Line 1246, Exitcode 139
!!! Failed to set SELinux security labels.
!!! If you need support, post the topmost build error, NOT this status
message.

!!! FAILED preinst: 1


emerge info:
Portage 2.0.51.19 (selinux/2004.1/x86/hardened, gcc-3.3.5-20050130,
glibc-2.3.4.20041102-r1, 2.6.5-gentoo-r1 i686)
=================================================================
System uname: 2.6.5-gentoo-r1 i686 Pentium II (Deschutes)
Gentoo Base System version 1.4.16
Python:              dev-lang/python-2.3.5 [2.3.5 (#1, May 10 2005,
10:18:38)]
dev-lang/python:     2.3.5
sys-apps/sandbox:    [Not Present]
sys-devel/autoconf:  2.13, 2.59-r6
sys-devel/automake:  1.8.5-r3, 1.5, 1.7.9-r1, 1.6.3, 1.4_p6, 1.9.5
sys-devel/binutils:  2.15.92.0.2-r7
sys-devel/libtool:   1.5.16
virtual/os-headers:  2.6.8.1-r2
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CFLAGS="-O2 -mcpu=pentium2 -march=pentium2 -mmmx -fPIC
-momit-leaf-frame-pointer -fomit-frame-pointer -funroll-loops -ftracer
-finline-limit=600 -mfpmath=387 -pipe"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3/share/config
/usr/share/config /var/qmail/control"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d"
CXXFLAGS="-O2 -mcpu=pentium2 -march=pentium2 -mmmx -fPIC
-momit-leaf-frame-pointer -fomit-frame-pointer -funroll-loops -ftracer
-finline-limit=600 -mfpmath=387 -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoaddcvs autoconfig ccache distlocks loadpolicy sandbox
selinux sfperms strict"
GENTOO_MIRRORS="http://distfiles.gentoo.org
http://distro.ibiblio.org/pub/Linux/distributions/gentoo"
MAKEOPTS="-j5"
PKGDIR="/usr/portage/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="berkdb crypt dlloader gdbm hardened ipv6 ipv6arpa ithreads ncurses
nptl pam pcre perl pic pie pwdb python readline selinux slang spell ssl
threads x86 zlib userland_GNU kernel_linux elibc_glibc"
Unset:  ASFLAGS, CBUILD, CTARGET, LANG, LC_ALL, LDFLAGS, LINGUAS,
PORTDIR_OVERLAY

-- 
gentoo-hardened@g.o mailing list