Hi Morten,

Thanks for pointing this out, you probably saved me a few hours. It's
a funny bug and managed to slip through on the two machines I use more
often.

Many thanks,
NM


2011/12/19 Morten Stevens <[log in to unmask]>:
> On 19.12.2011 22:35, Nelson Marques wrote:
>>
>> I subscribe, it doesn't happen on a 6.2 system... _BUT_ on one email
>> above, someone was complaining on errors... I wonder if:
>>
>> 6.1 -> selinux-policy-3.7.19-93.el6_1.7.noarch
>>
>> 6.2 -> selinux-policy-3.7.19-126.el6_2.3.noarch
>>
>>
>> It seems to me it's a failed update, but not for sure an upstream bug.
>
>
> Hi,
>
> Steps to Reproduce:
>
> 1) Install a minimal RHEL 6.1 / SL 6.1 (clean fresh minimal install from
> DVD)
> 2) disable selinux > /etc/sysconfig/selinux = SELINUX=disabled
> 3) Update to 6.2
>
> And... It just happens on a 6.2 system...
>
> Here is the latest update: 3.7.19-126.el6_2.4
> https://rhn.redhat.com/errata/RHBA-2011-1837.html
>
> And here my update progress:
>
> [root@x86-014 ~]# uname -a
> Linux x86-014.corp.imt-systems.com 2.6.32-220.el6.x86_64 #1 SMP Wed Nov 9
> 08:03:13 EST 2011 x86_64 x86_64 x86_64 GNU/Linux
>
> [root@x86-014 ~]# sestatus
> SELinux status:                 disabled
> [root@x86-014 ~]# rpm -qa | grep selinux
> selinux-policy-3.7.19-126.el6_2.3.noarch
> selinux-policy-targeted-3.7.19-126.el6_2.3.noarch
> libselinux-2.0.94-5.2.el6.x86_64
> libselinux-utils-2.0.94-5.2.el6.x86_64
>
> [root@x86-014 ~]# yum update
> Loaded plugins: product-id, rhnplugin, subscription-manager
> Updating certificate-based repositories.
> Setting up Update Process
> Resolving Dependencies
> --> Running transaction check
> ---> Package nss.x86_64 0:3.12.10-16.el6 will be updated
> ---> Package nss.x86_64 0:3.12.10-17.el6_2 will be an update
> ---> Package nss-sysinit.x86_64 0:3.12.10-16.el6 will be updated
> ---> Package nss-sysinit.x86_64 0:3.12.10-17.el6_2 will be an update
> ---> Package selinux-policy.noarch 0:3.7.19-126.el6_2.3 will be updated
> ---> Package selinux-policy.noarch 0:3.7.19-126.el6_2.4 will be an update
> ---> Package selinux-policy-targeted.noarch 0:3.7.19-126.el6_2.3 will be
> updated
> ---> Package selinux-policy-targeted.noarch 0:3.7.19-126.el6_2.4 will be an
> update
> --> Finished Dependency Resolution
>
> Dependencies Resolved
>
> ==================================================================================================================================
>  Package                              Arch                Version
>              Repository                         Size
> ==================================================================================================================================
> Updating:
>  nss                                  x86_64              3.12.10-17.el6_2
>              rhel-x86_64-server-6              776 k
>  nss-sysinit                          x86_64              3.12.10-17.el6_2
>              rhel-x86_64-server-6               30 k
>  selinux-policy                       noarch              3.7.19-126.el6_2.4
>              rhel-x86_64-server-6              772 k
>  selinux-policy-targeted              noarch              3.7.19-126.el6_2.4
>              rhel-x86_64-server-6              2.5 M
>
> Transaction Summary
> ==================================================================================================================================
> Upgrade       4 Package(s)
>
> Total download size: 4.0 M
> Is this ok [y/N]: y
> Downloading Packages:
> (1/4): nss-3.12.10-17.el6_2.x86_64.rpm
>                              | 776 kB     00:00
> (2/4): nss-sysinit-3.12.10-17.el6_2.x86_64.rpm
>                              |  30 kB     00:00
> (3/4): selinux-policy-3.7.19-126.el6_2.4.noarch.rpm
>                               | 772 kB     00:00
> (4/4): selinux-policy-targeted-3.7.19-126.el6_2.4.noarch.rpm
>                              | 2.5 MB     00:01
> ----------------------------------------------------------------------------------------------------------------------------------
> Total
>                      538 kB/s | 4.0 MB     00:07
> Running rpm_check_debug
> Running Transaction Test
> Transaction Test Succeeded
> Running Transaction
>  Updating   : nss-sysinit-3.12.10-17.el6_2.x86_64
>                                                 1/8
>  Updating   : nss-3.12.10-17.el6_2.x86_64
>                                                 2/8
>  Updating   : selinux-policy-3.7.19-126.el6_2.4.noarch
>                                                3/8
>  Updating   : selinux-policy-targeted-3.7.19-126.el6_2.4.noarch
>                                                 4/8
>
> SELinux:  Could not downgrade policy file
> /etc/selinux/targeted/policy/policy.24, searching for an older version.
> SELinux:  Could not open policy file <=
> /etc/selinux/targeted/policy/policy.24:  No such file or directory
>  Cleanup    : selinux-policy-targeted-3.7.19-126.el6_2.3.noarch
>                                                 5/8
>  Cleanup    : nss-sysinit-3.12.10-16.el6.x86_64
>                                                 6/8
>  Cleanup    : nss-3.12.10-16.el6.x86_64
>                                                 7/8
>  Cleanup    : selinux-policy-3.7.19-126.el6_2.3.noarch
>                                                8/8
> Installed products updated.
>
> Updated:
>  nss.x86_64 0:3.12.10-17.el6_2
> nss-sysinit.x86_64 0:3.12.10-17.el6_2
>  selinux-policy.noarch 0:3.7.19-126.el6_2.4
>  selinux-policy-targeted.noarch 0:3.7.19-126.el6_2.4
>
> Complete!
> [root@x86-014 ~]#
>
> Best regards,
>
> Morten
>



-- 
Nelson Marques

/* http://www.marques.so
  [log in to unmask] */