conflicting specifications during booting up

Henry Zhang <[email protected]> Fri, 11 Aug 2023 10:12:14 -0700
Newsgroups gmane.linux.redhat.fedora.selinux
Message-ID <CANTW0ypPvO2i_0m+mdyxwfGHYU5px4Z08cd2snRzu4zEBaVtFA@mail.gmail.com>
--===============8868653508943536105==
Content-Type: multipart/alternative; boundary="0000000000001b954e0602a8d1c2"

--0000000000001b954e0602a8d1c2
Content-Type: text/plain; charset="UTF-8"

Hi guys,

My selinux complains during booting.
setfiles complains conflicting specifications:
selinux-autorelabel.sh[1524]: /sbin/setfiles: conflicting specifications
for /tmp/tmp.flCsmAYyao/usr/lib/systemd/system/smartcard.target and
/tmp/tmp.flCsmAYyao/usr/lib/systemd/user/smartcard.target, using
system_u:object_r:systemd_user_unit_t:s0.

# ls -Z /usr/lib/systemd/system/sound.target
system_u:object_r:systemd_user_unit_t:s0
/usr/lib/systemd/system/sound.target

ls -Z /usr/lib/systemd/user/sound.target
system_u:object_r:systemd_user_unit_t:s0 /usr/lib/systemd/user/sound.target

# grep "/usr/lib/systemd/system"
/etc/selinux/mcs/contexts/files/file_contexts


/usr/lib/systemd/system(/.*)?   system_u:object_r:systemd_unit_t:s0
/usr/lib/systemd/user(/.*)?     system_u:object_r:systemd_user_unit_t:s0

My question is why "/usr/lib/systemd/system/smartcard.target " does not
take systemd_unit_t from file_contexts?
What is wrong in my selinux?


Thanks.

----henry

--0000000000001b954e0602a8d1c2
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>Hi guys,</div><div><br></div><div>My selinux complain=
s during booting.</div><div>setfiles complains conflicting specifications:<=
br>selinux-autorelabel.sh[1524]: /sbin/setfiles: conflicting specifications=
 for /tmp/tmp.flCsmAYyao<span style=3D"color:rgb(255,0,0)">/usr/lib/systemd=
/system/smartcard.target </span>and /tmp/tmp.flCsmAYyao/usr/lib/systemd/use=
r/smartcard.target, using system_u:object_r:<span style=3D"color:rgb(153,0,=
255)">systemd_user_unit_t</span>:s0.</div><div><br></div><div># ls -Z /usr/=
lib/systemd/system/sound.target<br>system_u:object_r:systemd_user_unit_t:s0=
 /usr/lib/systemd/system/sound.target</div><div><br></div><div>ls -Z <span =
style=3D"color:rgb(153,0,255)">/usr/lib/systemd/user/sound.target</span><br=
>system_u:object_r:systemd_user_unit_t:s0 /usr/lib/systemd/user/sound.targe=
t</div><div><br></div><div><div># grep &quot;/usr/lib/systemd/system&quot;=
=20
/etc/selinux/mcs/contexts/files/file_contexts =C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0
 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0
 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0
 =C2=A0 =C2=A0 =C2=A0 <br>/usr/lib/systemd/system(/.*)? =C2=A0 system_u:obj=
ect_r:<span style=3D"color:rgb(255,0,0)">systemd_unit_t</span>:s0</div><div=
>/usr/lib/systemd/user(/.*)? =C2=A0 =C2=A0 system_u:object_r:<span style=3D=
"color:rgb(153,0,255)">systemd_user_unit_t</span>:s0</div><div><br></div><d=
iv>My question is why &quot;<span style=3D"color:rgb(255,0,0)">/usr/lib/sys=
temd/system/smartcard.target &quot; </span>does not take <span style=3D"col=
or:rgb(255,0,0)">systemd_unit_t </span>from file_contexts?</div><div>What i=
s wrong in my selinux?</div><div><br></div><div><br></div><div>Thanks.</div=
><div><br></div><div>----henry<br></div></div></div>

--0000000000001b954e0602a8d1c2--

--===============8868653508943536105==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline
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==

--===============8868653508943536105==--