Atomicorp

Posted: **Tue May 15, 2012 2:40 pm**

Just ran a yum upgrade for gradm-2.9-7 and it reported some warnings:

Updating   : gradm-2.9-7.el6.art.x86_64
Non-fatal <unknown> scriptlet failure in rpm package gradm-2.9-7.el6.art.x86_64
execstack: cannot open "/usr/lib*/python*/site-packages/_ctypes.so": No such file or directory
warning: %triggerin(gradm-2.9-7.el6.art.x86_64) scriptlet failed, exit status 1

Checked the RBAC policy for errors (these are warnings so not too bad):

Code: Select all

gradm -C
Warning: object does not exist in role :::kernel:::, subject /sbin/halt for the target of the symlink object /sbin/halt specified on line 494 of /etc/grsec/policy.
Warning: object does not exist in role :::kernel:::, subject /lib64/ld-linux-x86-64.so.2 for the target of the symlink object /lib64/ld-linux-x86-64.so.2 specified on line 494 of /etc/grsec/policy.
Warning: object does not exist in role default, subject / for the target of the symlink object /dev/cdrom specified on line 305 of /etc/grsec/policy.
Warning: object does not exist in role default, subject /sbin/gradm_pam for the target of the symlink object /etc/localtime specified on line 282 of /etc/grsec/policy.
Warning: object does not exist in role shutdown, subject /sbin/gradm_pam for the target of the symlink object /etc/localtime specified on line 250 of /etc/grsec/policy.

Also checked the status (more worrying):

Code: Select all

gradm -S
The /dev/grsec device is not properly installed on your system or you are not using a grsecurity kernel.

And the version installed (out of date?):

Code: Select all

gradm -v
gradm v2.2.2

This leaves me confused, I'm not sure what I should be seeing, have never run these commands before.

If anyone can shed any light on this, I'd be most grateful.

Posted: **Tue May 15, 2012 5:07 pm**

Sounds like something happened with the upgrade, can you reinstall that upgrade?

yum reinstall gradm

Posted: **Wed May 16, 2012 4:27 am**

Yup tried that, same result. Then noticed 2.9-8 in repo, ran yum upgrade gradm and still see:

Code: Select all

Non-fatal <unknown> scriptlet failure in rpm package gradm-2.9-8.el6.art.x86_64
execstack: cannot open "/usr/lib*/python*/site-packages/_ctypes.so": No such file or directory
warning: %triggerin(gradm-2.9-8.el6.art.x86_64) scriptlet failed, exit status 1

But now:

Code: Select all

gradm -v
gradm v2.9

So that seems to have updated OK, I guess the reported warnings are benign?
But:

Code: Select all

gradm -S
The RBAC system is currently disabled.

So maybe not?

Posted: **Thu May 17, 2012 5:17 pm**

Which kernel are you running?

Atomicorp

gradm-2.9-7

gradm-2.9-7

Re: gradm-2.9-7

Re: gradm-2.9-7

Re: gradm-2.9-7