CentOS - Jan 2017 - SELinux upgrade

I have experienced this myself.   It is very upsetting.  

(Sent from iPhone, so please accept my apologies in advance for any spelling or
grammatical errors.)
> On Jan 19, 2017, at 2:57 AM, Fabian Arrotin <arrfab at centos.org>
wrote:
> 
> log

W dniu 19.01.2017 o 10:17, Hal Wigoda pisze:
> I have experienced this myself.   It is very upsetting.  

It happened on servers with docker installed. I got error message there:
# semanage port -a -t ssh_port_t -p tcp <newport>
Re-declaration of type docker_t
Failed to create node
Bad type declaration at /etc/selinux/targeted/tmp/modules/100/docker/cil:1
OSError: Error

After uninstalling:
# yum remove docker*
Wczytane wtyczki: fastestmirror, langpacks, priorities, versionlock
Rozwi?zywanie zale?no?ci
--> Wykonywanie sprawdzania transakcji
---> Pakiet docker.x86_64 2:1.10.3-59.el7.centos zostanie usuni?ty
---> Pakiet docker-common.x86_64 2:1.10.3-59.el7.centos zostanie usuni?ty
---> Pakiet docker-forward-journald.x86_64 0:1.10.3-44.el7.centos
zostanie usuni?ty
---> Pakiet docker-registry.x86_64 0:0.9.1-7.el7 zostanie usuni?ty
---> Pakiet docker-selinux.x86_64 0:1.10.3-46.el7.centos.14 zostanie
usuni?ty
--> Uko?czono rozwi?zywanie zale?no?ci
[...]

And then:
# semanage port -a -t ssh_port_t -p tcp <newport>
Re-declaration of type docker_t
Failed to create node
Bad type declaration at /etc/selinux/targeted/tmp/modules/100/docker/cil:1
OSError: Error


# yum remove docker-selinux
Wczytane wtyczki: fastestmirror, langpacks, priorities, versionlock
Rozwi?zywanie zale?no?ci
--> Wykonywanie sprawdzania transakcji
---> Pakiet container-selinux.x86_64 2:1.10.3-59.el7.centos zostanie
usuni?ty
--> Uko?czono rozwi?zywanie zale?no?ci
[...]

# semanage port -a -t ssh_port_t -p tcp <newport>
ValueError: Port tcp/<newport> zosta? ju? okre?lony
# semanage port -l | grep ssh
ssh_port_t                     tcp      <newport>, 22


So, it looks like something with docker-selinux and container-selinux...

-- 
Over And Out
MoonWolf

On 01/19/2017 04:47 AM, Marcin Trendota wrote:
> W dniu 19.01.2017 o 10:17, Hal Wigoda pisze:
>> I have experienced this myself.   It is very upsetting.  
> 
> 
> It happened on servers with docker installed. I got error message there:
> # semanage port -a -t ssh_port_t -p tcp <newport>
> Re-declaration of type docker_t
> Failed to create node
> Bad type declaration at /etc/selinux/targeted/tmp/modules/100/docker/cil:1
> OSError: Error
> 
> After uninstalling:
> # yum remove docker*
> Wczytane wtyczki: fastestmirror, langpacks, priorities, versionlock
> Rozwi?zywanie zale?no?ci
> --> Wykonywanie sprawdzania transakcji
> ---> Pakiet docker.x86_64 2:1.10.3-59.el7.centos zostanie usuni?ty
> ---> Pakiet docker-common.x86_64 2:1.10.3-59.el7.centos zostanie
usuni?ty
> ---> Pakiet docker-forward-journald.x86_64 0:1.10.3-44.el7.centos
> zostanie usuni?ty
> ---> Pakiet docker-registry.x86_64 0:0.9.1-7.el7 zostanie usuni?ty
> ---> Pakiet docker-selinux.x86_64 0:1.10.3-46.el7.centos.14 zostanie
> usuni?ty
> --> Uko?czono rozwi?zywanie zale?no?ci
> [...]
> 
> And then:
> # semanage port -a -t ssh_port_t -p tcp <newport>
> Re-declaration of type docker_t
> Failed to create node
> Bad type declaration at /etc/selinux/targeted/tmp/modules/100/docker/cil:1
> OSError: Error
> 
> 
> # yum remove docker-selinux
> Wczytane wtyczki: fastestmirror, langpacks, priorities, versionlock
> Rozwi?zywanie zale?no?ci
> --> Wykonywanie sprawdzania transakcji
> ---> Pakiet container-selinux.x86_64 2:1.10.3-59.el7.centos zostanie
> usuni?ty
> --> Uko?czono rozwi?zywanie zale?no?ci
> [...]
> 
> # semanage port -a -t ssh_port_t -p tcp <newport>
> ValueError: Port tcp/<newport> zosta? ju? okre?lony
> # semanage port -l | grep ssh
> ssh_port_t                     tcp      <newport>, 22
> 
> 
> So, it looks like something with docker-selinux and container-selinux...
> 
Right, I wanted to mention that docker-selinux was replaced with
container-selinux in the lasest version.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: OpenPGP digital signature
URL:
<http://lists.centos.org/pipermail/centos/attachments/20170119/5cb84c2f/attachment-0001.sig>