Re: "Could not change policy booleans"

[Stephen Smalley <sds tycho nsa gov>]

On Wed, 2007-06-13 at 10:00 +0100, Paul Howarth wrote:
> Daniel J Walsh wrote:
> > Paul Howarth wrote:
> >> Nils Caspar wrote:
> >>>> That should have been solved by an update to dbus in fc6 a month ago.
> >>> What Fedora
> >>>> release are you running? Are you completely updated?
> >>> I'm running a full updated fedora 7.
> >>>
> >>>> That should have worked. That should be the correct syntax. Was there
> >>> an avc
> >>>> associated with trying to set this?
> >>> There was no other warning.
> >>>
> >>> I have the same problem in an other fedora 7 VM. Maybe it's a fedora 7
> >>> bug... :(
> >>
> >> I've just hit the same problem on a fresh Fedora 7 install, with all 
> >> released updates.
> >>
> >> Paul.
> >>
> >> -- 
> >> fedora-selinux-list mailing list
> >> fedora-selinux-list redhat com
> >> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
> > Does this fix the problem?
> > 
> > restorecon -R -v /etc/selinux/targeted
> 
> No; there are no AVC denials in the audit log (at least not relating to 
> this...) so I don't think it's an SELinux permissions issue.
> 
> Updating to the latest selinux package updates from updates-testing 
> hasn't helped either.

Bug in setsebool (it is actually succeeding, but falling through to the
error path and thus incorrectly saying that it failed, as a result of a
"build fix").  Fixed in policycoreutils 2.0.21.

-- 
Stephen Smalley
National Security Agency