bug 154011 is alive and well on my system. This is using the selinux profile as on the documentation. emerge info.. Portage 2.1.2.2 (selinux/2005.1/x86, gcc-4.1.1, glibc-2.5-r0, 2.6.18-hardened-r6 i686) ================================================================= System uname: 2.6.18-hardened-r6 i686 Intel(R) Pentium(R) D CPU 2.66GHz Gentoo Base System release 1.12.9 Timestamp of tree: Fri, 30 Mar 2007 15:00:01 +0000 ccache version 2.4 [enabled] dev-lang/python: 2.4.3-r4 dev-python/pycrypto: 2.0.1-r5 dev-util/ccache: 2.4-r6 sys-apps/sandbox: 1.2.17 sys-devel/autoconf: 2.13, 2.61 sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10 sys-devel/binutils: 2.16.1-r3 sys-devel/gcc-config: 1.3.14 sys-devel/libtool: 1.5.22 virtual/os-headers: 2.6.17-r2 ACCEPT_KEYWORDS="x86" AUTOCLEAN="yes" CBUILD="i686-pc-linux-gnu" CFLAGS="-march=pentium2 -O2 -pipe -mno-tls-direct-seg-refs -g" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc /etc/postfix /etc/samba /etc/sasl2 /etc/squid /usr/share/X11/xkb" CONFIG_PROTECT_MASK="/etc/env.d /etc/gconf /etc/revdep-rebuild /etc/terminfo" CXXFLAGS="-march=pentium2 -O2 -pipe -mno-tls-direct-seg-refs -g" DISTDIR="/usr/portage/distfiles" FEATURES="autoconfig ccache distlocks metadata-transfer parallel-fetch sandbox selinux sesandbox sfperms strict" GENTOO_MIRRORS="http://distfiles.gentoo.org http://distro.ibiblio.org/pub/linux/distributions/gentoo" MAKEOPTS="-j3" PKGDIR="/usr/portage/packages" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --filter=H_**/files/digest-*" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/usr/local/portage" SYNC="rsync://192.168.95.254/gentoo-portage" USE="X acpi apache crypt dbus dri gif gmp gpm gtk hal jpeg nptl pam pcre pdf png readline sasl sse ssl tiff usb x86 xml xml2 xorg zlib" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mulaw multi null plug rate route share shm softvol" ELIBC="glibc" INPUT_DEVICES="keyboard mouse" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" USERLAND="GNU" VIDEO_CARDS="ati vesa nv" Unset: CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, LDFLAGS, LINGUAS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
I've discovered that it installs ok if I boot a normal kernel.
Yes, it seems to be a documentation error. emerge selinux-base-policy before rebooting into the hardened kernel.
An additional note... I did not have a "non" selinux kernel left in /boot. On a whim, I unmounted /selinux and selinux-base-policy successfully emerged then. This is much easier than a reboot. I'm glad it worked. Otherwise I'd have to rebuild a non selinux kernel or boot from the install cd again.
