the /etc/selinux problem

the /etc/selinux problem

[Tom]

Someone here had an install problem - sorry, I don't remember your
name.

I stepped back through my install and found your solution:


There is a hen-egg problem in /etc/dpkg/postinst.d/selinux when you
upgrade (don't know about fresh installs). Here's what I did to get it
solved:

dpkg --purge selinux-policy-default
manually rm -r /etc/selinux and rm -r /usr/share/selinux/policy
now vi /etc/dpkg/postinst.d/selinux and put an exit 0 right at the
start.
now dpkg -i selinux-policy-default_1.2.real-13_all.deb

should now work. Remove the exit 0 from the script. You may have to
issue a make relabel, but that's a good idea anyways.


-- 
PGP/GPG key: http://web.lemuria.org/pubkey.html
pub  1024D/2D7A04F5 2002-05-16 Tom Vogt <tom@lemuria.org>
     Key fingerprint = C731 64D1 4BCF 4C20 48A4  29B2 BF01 9FA1 2D7A 04F5

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: the /etc/selinux problem

[Dale Amon]

On Wed, Dec 03, 2003 at 11:17:47AM +0100, Tom wrote:
> Someone here had an install problem - sorry, I don't remember your
> name.
> 
> I stepped back through my install and found your solution:
> 
> 
> There is a hen-egg problem in /etc/dpkg/postinst.d/selinux when you
> upgrade (don't know about fresh installs). Here's what I did to get it
> solved:
> 
> dpkg --purge selinux-policy-default
> manually rm -r /etc/selinux and rm -r /usr/share/selinux/policy
> now vi /etc/dpkg/postinst.d/selinux and put an exit 0 right at the
> start.
> now dpkg -i selinux-policy-default_1.2.real-13_all.deb
> 
> should now work. Remove the exit 0 from the script. You may have to
> issue a make relabel, but that's a good idea anyways.

Might help the other fellow who is just trying to install, 
but don't see how this works for me. I'm installing
packages into a blank loopback (well, I instally my
custom base.tgz first) and I'm doing it on a non-selinux
'kernel factory' machine. The problem hits during the
mass package install phase of my build process and just 
simply torpedoes it.

When I get through a great deal of pain and agony of
upgrading my workstation to sarge (the dist that ate
galeon) I'll be looking into Stephen's suggestions.

PS: Has anyone else noticed that the galeon browswer
vanished without warning from the sarge dist? Not
even mentioned in the sarge main Package list now.
It really screwed me badly :-(

-- 
------------------------------------------------------
   Dale Amon     amon@islandone.org    +44-7802-188325
       International linux systems consultancy
     Hardware & software system design, security
    and networking, systems programming and Admin
	      "Have Laptop, Will Travel"
------------------------------------------------------

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: the /etc/selinux problem

[Dale Amon]

On Wed, Dec 03, 2003 at 11:17:47AM +0100, Tom wrote:
> There is a hen-egg problem in /etc/dpkg/postinst.d/selinux when you
> upgrade (don't know about fresh installs). Here's what I did to get it
> solved:
> 
> dpkg --purge selinux-policy-default
> manually rm -r /etc/selinux and rm -r /usr/share/selinux/policy
> now vi /etc/dpkg/postinst.d/selinux and put an exit 0 right at the
> start.
> now dpkg -i selinux-policy-default_1.2.real-13_all.deb
> 
> should now work. Remove the exit 0 from the script. You may have to

Yeah, but there's got to be a better way. Hopefully
Russell will figure out how to make his package work
in these 'corner cases' like you and I have been 
seeing lately.

-- 
------------------------------------------------------
   Dale Amon     amon@islandone.org    +44-7802-188325
       International linux systems consultancy
     Hardware & software system design, security
    and networking, systems programming and Admin
	      "Have Laptop, Will Travel"
------------------------------------------------------

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.