glibc rpm install error

glibc rpm install error

[Nick Davis]

Hello,

I've been trying to get SELinux 2.6 up and running on a RH9 box, and am 
having some difficulties.  I can compile/install the kernel just fine, 
but I run into problems when building the userspace tools.  
Specifically, I'm trying to get the SRPMs all built.  The source RPMs 
all install and build, leaving me with several RPMS in the i386 
directory.  I've managed to get everything working fine (i.e. RPMs all 
install without errors) except the SELinux-patched glibc RPMs.  Here's 
the error I get:

Error: %postun(glibc-2.3.2-27.9.selinux.0) scriptlet failed, exit status 121

 From that point on, any command I run gives a Segmentation Fault.  I 
tried installing the glibc RPMs last, after all of the other utils, but 
the same thing happens.

Has anyone run into this problem before, or have an idea on what the 
problem might be?

Thanks in advance,

Nick Davis
Center for Information Security
University of Tulsa



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: glibc rpm install error

[Stephen Smalley]

On Tue, 2003-09-02 at 13:10, Nick Davis wrote:
> Error: %postun(glibc-2.3.2-27.9.selinux.0) scriptlet failed, exit status 121
> 
>  From that point on, any command I run gives a Segmentation Fault.  I 
> tried installing the glibc RPMs last, after all of the other utils, but 
> the same thing happens.
> 
> Has anyone run into this problem before, or have an idea on what the 
> problem might be?

Yes.  The problem isn't specific to SELinux; it also occurs when
installing the original RHL errata RPMs if you install the i386 glibc on
a system that previously had the i686 glibc installed.  You need to
build two sets of glibc RPMS, one with --target=i386 and one with
--target=i686, then install the glibc-N.i686.rpm along with
glibc-{common,...}-N.i386.rpm, omitting the glibc-N.i386.rpm entirely.

You may also be able to just grab the rawhide glibc from RH and use it,
as the changes to support AT_SECURE were upstreamed.

-- 
Stephen Smalley <sds@epoch.ncsc.mil>
National Security Agency


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: glibc rpm install error

[Russell Coker]

On Wed, 3 Sep 2003 03:25, Stephen Smalley wrote:
> On Tue, 2003-09-02 at 13:10, Nick Davis wrote:
> > Error: %postun(glibc-2.3.2-27.9.selinux.0) scriptlet failed, exit status
> > 121
> >
> >  From that point on, any command I run gives a Segmentation Fault.  I
> > tried installing the glibc RPMs last, after all of the other utils, but
> > the same thing happens.
> >
> > Has anyone run into this problem before, or have an idea on what the
> > problem might be?
>
> Yes.  The problem isn't specific to SELinux; it also occurs when
> installing the original RHL errata RPMs if you install the i386 glibc on

There are also other potential problems.

When I tried compiling that for Debian I got the same result (of everything 
SEGV'ing) even though Debian does not have CPU optimised versions of glibc.

There must have been some subtle difference between my compiler and that which 
was used to originally build libc6, because I could not build one that worked 
in any reasonable amount of time.

If programs such as newrole etc are statically linked then you can get by 
without the patched libc6, and I'm planning to wait for it to get into the 
standard package (I've already spent excessive time fiddling with it).

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: glibc rpm install error

[Stephen Smalley]

On Wed, 2003-09-03 at 01:49, Russell Coker wrote:
> If programs such as newrole etc are statically linked then you can get by 
> without the patched libc6, and I'm planning to wait for it to get into the 
> standard package (I've already spent excessive time fiddling with it).

newrole cannot be statically linked, since it uses PAM.

-- 
Stephen Smalley <sds@epoch.ncsc.mil>
National Security Agency


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.