On Sat, Oct 5, 2024, 18:16 Barry Scott <ba...@barrys-emacs.org> wrote:

> I'm starting to work on a systemd run0 bug.
> And hit this issue.
>
> :  13:10:22   armf41  ~/rpmbuild.d/systemd/SPECS
> : [1] barry $ rpm -i ~/systemd-256.6-1.fc41.src.rpm
> error: ima: could not apply signature on
> '/home/barry/rpmbuild.d/systemd/SOURCES/.abignore;67012ce2': Operation not
> permitted
> error: Plugin ima: hook fsm_file_prepare failed
> error: unpacking of archive failed on file
> /home/barry/rpmbuild.d/systemd/SOURCES/.abignore;67012ce2: cpio: (error 0x2)
> error: /home/barry/systemd-256.6-1.fc41.src.rpm cannot be installed
>
> I copied the .src.rpm to an f40 and it installs.
>
> Anyone know why this fails?
> Should I raise a bug ticket?
>

Just so we're all on the same page - you're attempting to install an
.src.rpm file? What's that supposed to accomplish? I didn't even know this
worked (does it??) ... does it just unpack the srpm contents into
~/rpmbuild?

On the other hand, the error message you're seeing is from the IMA plugin.
So I assume you've enabled rpm-plugin-ima? It looks like it's attempting to
verify the signature on a file in your home directory, and I'm not sure how
that could even work.

If using rpm -i to unpack a srpm file is supposed to work, you might want
to file a bug against the IMA plugin, it probably should skip processing
files unpacked from srpms in some way.

A workaround might be to just unpack the srpm file with a normal archive
manager.

Fabio

>
-- 
_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to