Wind River Support Network

HomeDefectsSCP8-129
Not to be fixed

SCP8-129 : [seedit] /usr/share/seedit/initialize/seedit-installhelper.sh: line 29: /usr/sbin/update-rc.d: No such file or directory

Created: May 13, 2016    Updated: Mar 6, 2019
Resolved Date: Feb 19, 2019
Found In Version: 8.0
Severity: Standard
Applicable for: Wind River Linux 8
Component/s: Userspace

Description

root@qemu0:~# getenforce
Permissive
root@qemu0:~# seedit-init
Initializing seedit
Audit chdir:
True
mkdir -p /usr/share/seedit/sepolicy;
m4 -s /etc/seedit/policy/*.sp >/etc/seedit/policy/all.sp;
/usr/bin/seedit-converter -i /etc/seedit/policy/all.sp -o /usr/share/seedit/sepolicy -b /usr/share/seedit/base_policy -I /etc/seedit/policy/include ;
Warning label name conflict is detected.Label for /dev was dev_t but replaced by dev_t_t.
if [ -e /usr/share/seedit/base_policy/dynamic_contexts ]; then \
        cat /usr/share/seedit/base_policy/dynamic_contexts >> /usr/share/seedit/sepolicy/file_contexts.m4;\
fi;
m4 -D enable_mcs  -Imacros -s /usr/share/seedit/macros/*.te /usr/share/seedit/sepolicy/generated.conf > /usr/share/seedit/sepolicy/policy.conf;
m4 -D enable_mcs  -Imacros -s /usr/share/seedit/macros/mcs_macros.te /usr/share/seedit/sepolicy/file_contexts.m4 > /usr/share/seedit/sepolicy/file_contexts;
m4 -D enable_mcs -D out_dummy -Imacros -s /usr/share/seedit/macros/mcs_macros.te /usr/share/seedit/sepolicy/file_contexts.m4 > /usr/share/seedit/sepolicy/file_contexts.base;
m4 -D enable_mcs  -Imacros -s /usr/share/seedit/macros/mcs_macros.te /usr/share/seedit/sepolicy/userhelper_context.m4 > /usr/share/seedit/sepolicy/userhelper_context.tmp;
grep system_u /usr/share/seedit/sepolicy/userhelper_context.tmp >  /usr/share/seedit/sepolicy/userhelper_context
rm /usr/share/seedit/sepolicy/userhelper_context.tmp
/usr/bin/checkmodule /usr/share/seedit/sepolicy/policy.conf -M -o /usr/share/seedit/sepolicy/base.mod
/usr/bin/checkmodule:  loading policy configuration from /usr/share/seedit/sepolicy/policy.conf
/usr/bin/checkmodule:  policy configuration loaded
/usr/bin/checkmodule:  writing binary representation (version 17) to /usr/share/seedit/sepolicy/base.mod
/usr/bin/semodule_package -m /usr/share/seedit/sepolicy/base.mod -f /usr/share/seedit/sepolicy/file_contexts.base -o/usr/share/seedit/sepolicy/base.pp
cp /usr/share/seedit/sepolicy/file_contexts /etc/selinux/seedit/contexts/files/
cp /usr/share/seedit/sepolicy/file_contexts.m4 /etc/selinux/seedit/contexts/files/
if [ ! -e /usr/share/seedit/sepolicy/file_contexts.m4.old ] ; then \
   cp /usr/share/seedit/sepolicy/file_contexts.m4 /usr/share/seedit/sepolicy/file_contexts.m4.old;\
   cp /usr/share/seedit/sepolicy/file_contexts.m4.old /etc/selinux/seedit/contexts/files;\
fi;
cp /usr/share/seedit/sepolicy/customizable_types /etc/selinux/seedit/contexts
cp /usr/share/seedit/sepolicy/userhelper_context /etc/selinux/seedit/contexts
cp -r /usr/share/seedit/base_policy/contexts/*  /etc/selinux/seedit/contexts
echo "" > /etc/selinux/seedit/contexts/files/file_contexts.homedirs
echo "" > /etc/selinux/seedit/contexts/files/file_contexts.local
echo "" >  /etc/selinux/seedit/users/system.users
echo "" >  /etc/selinux/seedit/users/local.users
/usr/sbin/semodule -b /usr/share/seedit/sepolicy/base.pp -s seedit -n
The --base option is deprecated. Use --install instead.
#file_contexts is overwritten by semodule -b, have to restore
cp /usr/share/seedit/sepolicy/file_contexts /etc/selinux/seedit/contexts/files/
seedit-load: Success
/sbin/auditctl -d exit,always -S chdir  >/dev/null 2>&1
/sbin/auditctl -d exit,always -S chdir -F obj_type=dhclient_t >/dev/null 2>&1
auditfilter: audit rule for LSM 'dhclient_t' is invalid
/sbin/auditctl -d exit,always -S chdir -F obj_type=sendmail_t >/dev/null 2>&1
/sbin/auditctl -d exit,always -S chdir -F obj_type=mcstransd_t >/dev/null 2>&1
auditfilter: audit rule for LSM 'mcstransd_t' is invalid
/sbin/auditctl -d exit,always -S chdir -F obj_type=sshd_t >/dev/null 2>&1
/sbin/auditctl -d exit,always -S chdir -F obj_type=ntpd_t >/dev/null 2>&1
/sbin/auditctl -d exit,always -S chdir -F obj_type=samba_t >/dev/null 2>&1
auditfilter: audit rule for LSM 'samba_t' is invalid
/sbin/auditctl -d exit,always -S chdir -F obj_type=named_t >/dev/null 2>&1
/sbin/auditctl -d exit,always -S chdir -F obj_type=klogd_t >/dev/null 2>&1
/sbin/auditctl -d exit,always -S chdir -F obj_type=crond_t >/dev/null 2>&1
/sbin/auditctl -d exit,always -S chdir -F obj_type=httpd_t >/dev/null 2>&1
/sbin/auditctl -d exit,always -S chdir -F obj_type=auditd_t >/dev/null 2>&1
/sbin/auditctl -d exit,always -S chdir -F obj_type=portmap_t >/dev/null 2>&1
/sbin/auditctl -d exit,always -S chdir -F obj_type=syslogd_t >/dev/null 2>&1
/sbin/auditctl -a exit,always -S chroot
WARNING - 32/64 bit syscall mismatch, you should specify an arch
/sbin/auditctl -a exit,always -S chdir -F obj_type=dhclient_t >/dev/null 2>&1
auditfilter: audit rule for LSM 'dhclient_t' is invalid
/sbin/auditctl -a exit,always -S chdir -F obj_type=sendmail_t >/dev/null 2>&1
/sbin/auditctl -a exit,always -S chdir -F obj_type=mcstransd_t >/dev/null 2>&1
auditfilter: audit rule for LSM 'mcstransd_t' is invalid
/sbin/auditctl -a exit,always -S chdir -F obj_type=sshd_t >/dev/null 2>&1
/sbin/auditctl -a exit,always -S chdir -F obj_type=ntpd_t >/dev/null 2>&1
/sbin/auditctl -a exit,always -S chdir -F obj_type=samba_t >/dev/null 2>&1
auditfilter: audit rule for LSM 'samba_t' is invalid
/sbin/auditctl -a exit,always -S chdir -F obj_type=named_t >/dev/null 2>&1
/sbin/auditctl -a exit,always -S chdir -F obj_type=klogd_t >/dev/null 2>&1
/sbin/auditctl -a exit,always -S chdir -F obj_type=crond_t >/dev/null 2>&1
/sbin/auditctl -a exit,always -S chdir -F obj_type=httpd_t >/dev/null 2>&1
/sbin/auditctl -a exit,always -S chdir -F obj_type=auditd_t >/dev/null 2>&1
/sbin/auditctl -a exit,always -S chdir -F obj_type=portmap_t >/dev/null 2>&1
/sbin/auditctl -a exit,always -S chdir -F obj_type=syslogd_t >/dev/null 2>&1
/usr/share/seedit/initialize/seedit-installhelper.sh: line 29: /usr/sbin/update-rc.d: No such file or directory
Done

Steps to Reproduce

1) configure --enable-board=qemux86-64 --enable-kernel=secure --enable-rootfs=secure-core --with-init=sysvinit

2) make fs

3) make start-target TARGET_VIRT_BOOT_TYPE=disk TARGET_VIRT_DISK=$(/bin/ls -1 `pwd`/export/*.ext4) TARGET_QEMU_KERNEL_OPTS='selinux=1 enforcing=0'

4) # seedit-init
Live chat
Online