SELinux(?) error after latest dnf upgrade

iolaum · April 10, 2020, 8:43am

After performing today’s dnf upgrade I got error messages like the one below:

Upgrading        : grub2-common-1:2.02-107.fc31.noarch  1/86 
error: lsetfilecon: (/boot/efi/EFI/fedora, system_u:object_r:boot_t:s0) Operation not supported

At the end I did get:

Verifying        : grub2-common-1:2.02-107.fc31.noarch 9/86

So I m not sure if there’s anything to worry about. Is there? And should I be reporting this as a bug?
Note that the same error also happened to

grub2-efi-ia32-1:2.02-107.fc31.x86_64
grub2-efi-x64-1:2.02-107.fc31.x86_64
grub2-efi-ia32-cdboot-1:2.02-107.fc31.x86_64
grub2-efi-x64-cdboot-1:2.02-107.fc31.x86_64

ankursinha · April 10, 2020, 8:52am

Best to file a bug. If it isn’t one, the maintainers will explain and close it.

iolaum · April 10, 2020, 9:55am

Cool I reported the bug here.

pauld · April 10, 2020, 10:01pm

Can you tell the output of “cat /etc/default/grub” ?

iolaum · April 11, 2020, 3:22pm

Yes,

$ cat /etc/default/grub 
GRUB_TIMEOUT=5
GRUB_DISTRIBUTOR="$(sed 's, release .*$,,g' /etc/system-release)"
GRUB_DEFAULT=saved
GRUB_DISABLE_SUBMENU=true
GRUB_TERMINAL_OUTPUT="console"
GRUB_CMDLINE_LINUX="resume=UUID=aeeb33eb-b66a-4b61-8307-914a9c6b618e rd.luks.uuid=luks-19e9307e-f51f-4dfb-8d65-c369c33a19e6 nomodeset rhgb quiet"
GRUB_DISABLE_RECOVERY="true"
GRUB_ENABLE_BLSCFG=true

pauld · April 11, 2020, 3:50pm

Thanks, I was thinking that maybe you had:
GRUB_ENABLE_BLSCFG=false
but it does not seems to be the case.

sixpack13 · April 11, 2020, 6:35pm

maybe related to this ?

https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org/thread/JBAG55G3OLGSQHI3MIRFLRPKEHAHFVIK/

what is your Version of selinux-policy ?
How did you do updates, graphical ?

iolaum · April 11, 2020, 6:46pm

The linked thread is about F32 policy. In case it helps my current version is:

$ dnf info selinux-policy

Installed Packages
Name         : selinux-policy
Version      : 3.14.4
Release      : 50.fc31
Architecture : noarch
Size         : 25 k
Source       : selinux-policy-3.14.4-50.fc31.src.rpm
Repository   : @System
From repo    : updates
Summary      : SELinux policy configuration
URL          : https://github.com/fedora-selinux/selinux-policy
License      : GPLv2+
Description  : SELinux Base package for SELinux Reference Policy - modular.
         : Based off of reference policy: Checked out revision  2.20091117

d34db33f · May 15, 2020, 7:36pm

I got the same error recently when running sudo dnf update -y.

$ cat /etc/default/grub
GRUB_TIMEOUT=5
GRUB_DISTRIBUTOR="$(sed 's, release .*$,,g' /etc/system-release)"
GRUB_DEFAULT=saved
GRUB_DISABLE_SUBMENU=true
GRUB_TERMINAL_OUTPUT="console"
GRUB_CMDLINE_LINUX="resume=/dev/mapper/fedora_localhost--live-swap rd.lvm.lv=fedora_localhost-live/root rd.lvm.lv=fedora_localhost-live/swap rhgb quiet"
GRUB_DISABLE_RECOVERY="true"
GRUB_ENABLE_BLSCFG=true

Then there’s the version of selinux-policy I have installed.

$ dnf info selinux-policy
Name         : selinux-policy
Version      : 3.14.5
Release      : 38.fc32
Architecture : noarch
Size         : 25 k
Source       : selinux-policy-3.14.5-38.fc32.src.rpm
Repository   : @System
From repo    : updates
Summary      : SELinux policy configuration
URL          : https://github.com/fedora-selinux/selinux-policy
License      : GPLv2+
Description  : SELinux Base package for SELinux Reference Policy - modular.
             : Based off of reference policy: Checked out revision  2.20091117