On Tue, Feb 16, 2016, at 12:27 PM, Giuseppe Scrivano wrote:
> # systemctl stop rpm-ostreed
> # cp /usr/libexec/rpm-ostreed /tmp
> # chcon system_u:object_r:install_exec_t:s0 /tmp/rpm-ostreed
> # /tmp/rpm-ostreed
A slight alternative here to hotfix the existing deployment:
# mount -o remount,rw /usr
# cp /usr/libexec/rpm-ostreed{,.new}
# mv /usr/libexec/rpm-ostreed{.new,}
# chcon system_u:object_r:install_exec_t:s0 /usr/libexec/rpm-ostreed
(The middle two commands break the hardlink properly)
We need an selinux-policy update that does not add any new types to fix this.
This was introduced by the switch to the daemon.
