Re: install of kernel 2.6.4-1.298-rpm does not work - SElinux?

[Stephen Smalley <sds epoch ncsc mil>]

On Wed, 2004-03-31 at 09:44, Götz Reinicke wrote:
> Hi,
> 
> I recently installed FC2T2 on a Toshiba Satellite Pro 2100 from DVD. 
> That worked fine.
> 
> Today I downloaded the kernel-2.6.4-1.298-rpm an did an rpm -ivh - that 
> failed:
> 
> [root dilbert root]# rpm -ivh kernel-2.6.4-1.298.i686.rpm
> Preparing...                ########################################### 
> [100%]
> Fehler: setexeccon(root:staff_r:rpm_script_t) fails from context
> "root:staff_r:s taff_t": Das Argument ist ungültig
> Fehler: %pre(kernel-2.6.4-1.298) scriptlet failed, exit status 255
> Fehler:   install: %pre scriptlet failed (2), skipping kernel-2.6.4-1.298
> 
> 
> setexeccon concernes selinux, but but whats wrong...?

By default, unless you enable unlimitedUsers in policy/tunable.te and
reload your policy, you have to run yum from sysadm_r:sysadm_t, not
staff_r:staff_t.  You can use 'su' or 'newrole' to switch to sysadm_r,
or you can make it the default by changing
/etc/security/default_contexts.

-- 
Stephen Smalley <sds epoch ncsc mil>
National Security Agency