"Could not change policy booleans"

[Stephen Smalley]

On Wed, 2007-06-13 at 14:35 +0100, Paul Howarth wrote:
> Stephen Smalley wrote:
> > On Wed, 2007-06-13 at 10:00 +0100, Paul Howarth wrote:
> >> Daniel J Walsh wrote:
> >>> Paul Howarth wrote:
> >>>> Nils Caspar wrote:
> >>>>>> That should have been solved by an update to dbus in fc6 a month ago.
> >>>>> What Fedora
> >>>>>> release are you running? Are you completely updated?
> >>>>> I'm running a full updated fedora 7.
> >>>>>
> >>>>>> That should have worked. That should be the correct syntax. Was there
> >>>>> an avc
> >>>>>> associated with trying to set this?
> >>>>> There was no other warning.
> >>>>>
> >>>>> I have the same problem in an other fedora 7 VM. Maybe it's a fedora 7
> >>>>> bug... :(
> >>>> I've just hit the same problem on a fresh Fedora 7 install, with all 
> >>>> released updates.
> >>>>
> >>>> Paul.
> >>>>
> >>>> -- 
> >>>> fedora-selinux-list mailing list
> >>>> fedora-selinux-list at redhat.com
> >>>> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
> >>> Does this fix the problem?
> >>>
> >>> restorecon -R -v /etc/selinux/targeted
> >> No; there are no AVC denials in the audit log (at least not relating to 
> >> this...) so I don't think it's an SELinux permissions issue.
> >>
> >> Updating to the latest selinux package updates from updates-testing 
> >> hasn't helped either.
> > 
> > Bug in setsebool (it is actually succeeding, but falling through to the
> > error path and thus incorrectly saying that it failed, as a result of a
> > "build fix").  Fixed in policycoreutils 2.0.21.
> 
> Ah, saves me having to put something in an initscript :-)
> 
> FC7 has policycoreutils-2.0.16-5.fc7 (from updates-testing), which seems 
> a long way behind 2.0.21. Is a fix likely any time soon?

I sent Dan the patch separately as well, in case he wants to just apply
it without updating otherwise.

-- 
Stephen Smalley
National Security Agency