Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 885317 - systemd: (with sys-apps/merge-usr) Failed to set new SELinux execution context
Summary: systemd: (with sys-apps/merge-usr) Failed to set new SELinux execution context
Status: RESOLVED INVALID
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: SELinux (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: SE Linux Bugs
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2022-12-10 11:57 UTC by bdouxx
Modified: 2022-12-11 16:49 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description bdouxx 2022-12-10 11:57:05 UTC
!!! Failed to set new SELinux execution context. Is your current SELinux context allowed to run Portage?
 * Package 'sys-apps/systemd-251.8' has internal collisions between non-
 * identical files (located in separate directories in the installation
 * image (${D}) corresponding to merged directories in the target
 * filesystem (${ROOT})):
 * 
 *      /usr/lib/systemd/systemd
 *              /lib/systemd/systemd
 *              /usr/lib/systemd/systemd
 *                      Differences: type, mode
 * 
 *      /usr/lib/systemd/systemd-shutdown
 *              /lib/systemd/systemd-shutdown
 *              /usr/lib/systemd/systemd-shutdown
 *                      Differences: type, mode
 * 
 * Package 'sys-apps/systemd-251.8' NOT merged due to internal collisions
 * between non-identical files. If necessary, refer to your elog messages
 * for the whole content of the above message.


Reproducible: Always

Actual Results:  
can't install


Portage 3.0.41 (python 3.10.9-final-0, default/linux/amd64/17.1/systemd/selinux, gcc-11.3.0, glibc-2.36-r5, 5.15.80-gentoo-x86_64 x86_64)
=================================================================
System uname: Linux-5.15.80-gentoo-x86_64-x86_64-Intel-R-_Core-TM-_i5-6200U_CPU_@_2.30GHz-with-glibc2.36
KiB Mem:    16273476 total,   9259876 free
KiB Swap:    1048572 total,   1048572 free
Timestamp of repository gentoo: Sat, 10 Dec 2022 11:01:53 +0000
Head commit of repository gentoo: c89e9fe2f234a213bca27a4d3b42be6903763609

sh bash 5.1_p16-r2
ld GNU ld (Gentoo 2.38 p4) 2.38
app-misc/pax-utils:        1.3.5::gentoo
app-shells/bash:           5.1_p16-r2::gentoo
dev-java/java-config:      2.3.1::gentoo
dev-lang/perl:             5.34.1-r4::gentoo
dev-lang/python:           3.10.9::gentoo, 3.11.0_p2::gentoo
dev-lang/rust:             1.65.0::gentoo
dev-util/cmake:            3.24.3::gentoo
dev-util/meson:            0.63.3::gentoo
sec-policy/selinux-base:   2.20221101-r2::gentoo
sys-apps/baselayout:       2.9::gentoo
sys-apps/sandbox:          2.29::gentoo
sys-apps/systemd:          251.7::gentoo
sys-devel/autoconf:        2.13-r7::gentoo, 2.71-r5::gentoo
sys-devel/automake:        1.16.5::gentoo
sys-devel/binutils:        2.38-r2::gentoo
sys-devel/binutils-config: 5.4.1::gentoo
sys-devel/clang:           15.0.5::gentoo
sys-devel/gcc:             11.3.0::gentoo
sys-devel/gcc-config:      2.8::gentoo
sys-devel/libtool:         2.4.7::gentoo
sys-devel/lld:             15.0.5::gentoo
sys-devel/llvm:            14.0.6-r2::gentoo, 15.0.5::gentoo
sys-devel/make:            4.3::gentoo
sys-kernel/linux-headers:  5.15-r3::gentoo (virtual/os-headers)
sys-libs/glibc:            2.36-r5::gentoo
sys-libs/libselinux:       3.4::gentoo
Repositories:

local
    location: /var/db/repos/local
    masters: gentoo

crossdev-overlay
    location: /usr/local/portage/crossdev-overlay
    masters: gentoo
    priority: 10

bdouxx-overlay
    location: /usr/local/portage/bdouxx-overlay
    masters: gentoo
    priority: 90

gentoo
    location: /usr/portage
    sync-type: git
    sync-uri: https://github.com/gentoo-mirror/gentoo.git
    priority: 95

ACCEPT_KEYWORDS="amd64"
ACCEPT_LICENSE="@FREE"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=skylake -O2 -pipe"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/lib64/libreoffice/program/sofficerc /usr/share/config /usr/share/gnupg/qualified.txt /usr/share/maven-bin-3.8/conf"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php8.1/ext-active/ /etc/php/cgi-php8.1/ext-active/ /etc/php/cli-php8.1/ext-active/ /etc/php/fpm-php8.1/ext-active/ /etc/php/phpdbg-php8.1/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo"
CXXFLAGS="-march=skylake -O2 -pipe"
DISTDIR="/usr/portage/distfiles"
EMERGE_DEFAULT_OPTS="--jobs=5 --load-average=4 --with-bdeps=y"
ENV_UNSET="CARGO_HOME DBUS_SESSION_BUS_ADDRESS DISPLAY GOBIN GOPATH PERL5LIB PERL5OPT PERLPREFIX PERL_CORE PERL_MB_OPT PERL_MM_OPT XAUTHORITY XDG_CACHE_HOME XDG_CONFIG_HOME XDG_DATA_HOME XDG_RUNTIME_DIR XDG_STATE_HOME"
FCFLAGS="-O2 -pipe"
FEATURES="assume-digests binpkg-docompress binpkg-dostrip binpkg-logs buildpkg buildpkg-live clean-logs config-protect-if-modified distlocks ebuild-locks fixlafiles ipc-sandbox merge-sync multilib-strict network-sandbox news parallel-fetch preserve-libs protect-owned qa-unresolved-soname-deps sandbox selinux sesandbox sfperms strict strict-keepdir unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr"
FFLAGS="-O2 -pipe"
GENTOO_MIRRORS="ftp://ftp.free.fr/mirrors/ftp.gentoo.org/ ftp://gentoo.imj.fr/pub/gentoo/ http://gentoo.modulix.net/gentoo/ http://gentoo.mirrors.ovh.net/gentoo-distfiles/ ftp://gentoo.mirrors.ovh.net/gentoo-distfiles/ ftp://mirrors.soeasyto.com/distfiles.gentoo.org/ http://mirrors.soeasyto.com/distfiles.gentoo.org/"
LANG="fr_FR.utf8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed"
LINGUAS="en fr"
MAKEOPTS="-j5 -l4"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git"
PORTAGE_TMPDIR="/var/tmp"
SHELL="/bin/bash"
USE="7zip X a52 aac acl acpi activities aio alsa amd64 audit bluetooth branding bzip2 cacert cairo caps cdda cdio cdr cgroup-hybrid chromecast chromium clang cli connection-sharing context crypt cryptsetup cups dbus declarative device-mapper dnssec drafts dri drm dts dvd dvdr egl encode epub equalizer exif ffmpeg flac fortran frei0r ftdi fuse gbm gd gdbm geckodriver gentoo-dev gentoo-vm gif git gold gpg gtk gui harfbuzz hpcups hwaccel iconv icu idn inspector ipv6 iwd jbr11 jpeg jumbo-build kde kdesu kwallet lame lcms libass libdrm libglvnd libmpv libnotify libtirpc libyaml lua lvm mad mariadb matroska mng mp3 mp4 mpeg mtp multilib multimedia nat native-headset ncurses network networkmanager nfsv41 nftables nls nptl nss ntfs ofx ogg opengl openh264 openmp opus pam pango pcre pcre32 pdf pdfimport pipewire-alsa plasma png policykit postproc ppds printsupport pulseaudio qml qt5 rar readline rpc rustfmt sasl scanner screencast script sddm sdl seccomp secure-delete selinux snmp sound-server spell split-usr sqlite ssl startup-notification svg swiftshader system-mesa systemd test-rust theora tiff tinfo truetype udev udisks unicode update_drivedb upower usb usbredir user-session v4l vaapi vhost-net vorbis vpx vulkan warmstarts wavpack wayland webchannel webdav webp widgets wifi wired wxwidgets x264 x265 xattr xcb xkb xml xmlwriter xv xvid zip zlib" ABI_X86="64" ADA_TARGET="gnat_2021" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="karbon sheets words" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="aes avx avx2 f16c fma3 mmx mmxext pclmul popcnt rdrand sse sse2 sse3 sse4_1 sse4_2 ssse3" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock greis isync itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf skytraq superstar2 timing tsip tripmate tnt ublox ubx" INPUT_DEVICES="libinput" KERNEL="linux" L10N="en-GB fr" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LUA_SINGLE_TARGET="lua5-1" LUA_TARGETS="lua5-1" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php8-0" POSTGRES_TARGETS="postgres12 postgres13" PYTHON_SINGLE_TARGET="python3_10" PYTHON_TARGETS="python3_10" QEMU_SOFTMMU_TARGETS="arm x86_64 sparc" QEMU_USER_TARGETS="x86_64" RUBY_TARGETS="ruby27" SANE_BACKENDS="hp escl" USERLAND="GNU" VIDEO_CARDS="intel i965 iris" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq proto steal rawnat logmark ipmark dhcpmac delude chaos account"
Unset:  ADDR2LINE, AR, ARFLAGS, AS, ASFLAGS, CC, CCLD, CONFIG_SHELL, CPP, CPPFLAGS, CTARGET, CXX, CXXFILT, ELFEDIT, EXTRA_ECONF, F77FLAGS, FC, GCOV, GPROF, INSTALL_MASK, LC_ALL, LD, LEX, LFLAGS, LIBTOOL, MAKE, MAKEFLAGS, NM, OBJCOPY, OBJDUMP, PORTAGE_BINHOST, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, RANLIB, READELF, RUSTFLAGS, SIZE, STRINGS, STRIP, YACC, YFLAGS
Comment 1 Kenton Groombridge gentoo-dev 2022-12-10 19:05:09 UTC
I think there's 2 separate issues here: the SELinux context setting with Portage and the internal file collision. As for the latter, it doesn't look like you set the system profile to a merged-usr one (the split-usr USE flag is still enabled) after running the merge-usr script. So what's happening is the systemd ebuild is installing both a split-usr compatibility symlink and the real binary on the system to the same path.

Please switch to a systemd/selinux/merged-usr profile and try rebuilding.
Comment 2 bdouxx 2022-12-11 16:49:23 UTC
thank you
with this profile it's good