Note: This is a public test instance of Red Hat Bugzilla. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback at bugzilla.redhat.com.
RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Bug 1777502 - error: lsetfilecon: (/boot/efi/EFI/redhat/fonts, system_u:object_r:boot_t:s0) Operation not supported
Summary: error: lsetfilecon: (/boot/efi/EFI/redhat/fonts, system_u:object_r:boot_t:s0)...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 8
Classification: Red Hat
Component: rpm
Version: 8.1
Hardware: Unspecified
OS: Unspecified
low
low
Target Milestone: rc
: 8.0
Assignee: Panu Matilainen
QA Contact: Eva Mrakova
URL:
Whiteboard:
: 1783201 1798530 1827087 1845168 (view as bug list)
Depends On: 1765187
Blocks: 1743676 1825061
TreeView+ depends on / blocked
 
Reported: 2019-11-27 16:27 UTC by Welterlen Benoit
Modified: 2024-03-25 15:32 UTC (History)
17 users (show)

Fixed In Version: rpm-4.14.3-1.el8
Doc Type: Bug Fix
Doc Text:
Cause: A package is installed on a file system that doesn't support the setting of SELinux security contexts. Consequence: RPM prints an error message about the operation not being supported, although it exits with code 0 (success). Fix: RPM has been fixed to not print the message, as it's considered spurious in this scenario. The point being, if the FS doesn't support the contexts, there's no point in complaining about it in RPM. Result: RPM no longer prints an error message in this scenario.
Clone Of:
Environment:
Last Closed: 2020-11-04 02:03:16 UTC
Type: Bug
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2020:4561 0 None None None 2020-11-04 02:03:36 UTC

Description Welterlen Benoit 2019-11-27 16:27:42 UTC 
This bug was initially created as a copy of Bug #1722766

I am copying this bug because: 
I can see this issue on RHEL8.1 (as a customer)


 yum reinstall grub2-efi
Updating Subscription Management repositories.
Unable to read consumer identity
This system is not registered to Red Hat Subscription Management. You can use subscription-manager to register.
Last metadata expiration check: 0:00:37 ago on Wed 27 Nov 2019 11:18:18 AM EST.
Dependencies resolved.
==============================================================================================================================================================================================================================================
 Package                                                       Architecture                                           Version                                                        Repository                                          Size
==============================================================================================================================================================================================================================================
Reinstalling:
 grub2-efi-x64                                                 x86_64                                                 1:2.02-78.el8                                                  os                                                 400 k

Transaction Summary
==============================================================================================================================================================================================================================================

Total download size: 400 k
Installed size: 1.8 M
Is this ok [y/N]: y
Downloading Packages:
grub2-efi-x64-2.02-78.el8.x86_64.rpm                                                                                                                                                                          8.8 MB/s | 400 kB     00:00    
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total                                                                                                                                                                                                         8.0 MB/s | 400 kB     00:00     
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Preparing        :                                                                                                                                                                                                                      1/1 
  Reinstalling     : grub2-efi-x64-1:2.02-78.el8.x86_64                                                                                                                                                                                   1/2 
error: lsetfilecon: (/boot/efi/EFI/redhat/fonts, system_u:object_r:boot_t:s0) Operation not supported
error: lsetfilecon: (/boot/efi/EFI/redhat/grubx64.efi;5ddea1f1, system_u:object_r:boot_t:s0) Operation not supported

  Cleanup          : grub2-efi-x64-1:2.02-78.el8.x86_64                                                                                                                                                                                   2/2 
  Verifying        : grub2-efi-x64-1:2.02-78.el8.x86_64                                                                                                                                                                                   1/2 
  Verifying        : grub2-efi-x64-1:2.02-78.el8.x86_64                                                                                                                                                                                   2/2 
Installed products updated.

Reinstalled:
  grub2-efi-x64-1:2.02-78.el8.x86_64                                                                                                                                                                                                          

Complete!

--
The  lsetxattr("/boot/efi/EFI/redhat" is not an issue but it seems that it is more verbose than before...
Comment 1 Panu Matilainen 2019-11-28 08:36:32 UTC 
That message comes from rpm-plugin-selinux, yum is not involved.

Silencing it is easy, just makes me wonder what the right thing to do is. Clearly if a filesystem doesn't support labeling there's not much point complaining about it, BUT only if this is an expected situation. With EFI it is, but there are situations where that might not be the case.
Comment 2 Welterlen Benoit 2019-11-28 08:50:51 UTC 
Thanks for the component change.

If the FS does not allow extended attributes, it should not try to lsetxattr.
Or the error should be filtered if it's due to FS capabilities.

Thanks

Benoit
Comment 3 Panu Matilainen 2019-12-13 12:21:13 UTC 
Proposed upstream fix: https://github.com/rpm-software-management/rpm/pull/976
Comment 4 Panu Matilainen 2019-12-13 12:24:00 UTC 
Just to be clear: the error is cosmetical, rpm is already filtering out -EOPNOTSUPP error so the install doesn't fail, it's just unnecessarily noisy about it.
Comment 5 Chris Murphy 2020-01-18 19:25:59 UTC 
Looks like the same problem as bug 1722766.
Comment 7 redjaap@softskills.nl 2020-03-19 17:57:04 UTC 
it is also in fedora 32. 
several times in dnf update. One of them is 
Error: lsetfilecon: (/boot/efi/EFI/fedora/gcdx64.efi;5e73b099, system_u:object_r:boot_t:s0) Operation not supported
Comment 8 redjaap@softskills.nl 2020-03-19 17:59:03 UTC 
error: lsetfilecon: (/boot/efi/EFI/fedora/fonts, system_u:object_r:boot_t:s0) Operation not supported
error: lsetfilecon: (/boot/efi/EFI/fedora/grubia32.efi;5e73b099, system_u:object_r:boot_t:s0) Operation not supported

  Upgrading        : grub2-efi-x64-1:2.04-10.fc32.x86_64                  26/72 
error: lsetfilecon: (/boot/efi/EFI/fedora/grubx64.efi;5e73b099, system_u:object_r:boot_t:s0) Operation not supported

  Upgrading        : grub2-tools-extra-1:2.04-10.fc32.x86_64              27/72 
  Upgrading        : grub2-efi-ia32-cdboot-1:2.04-10.fc32.x86_64          28/72 
error: lsetfilecon: (/boot/efi/EFI/fedora/fonts, system_u:object_r:boot_t:s0) Operation not supported
error: lsetfilecon: (/boot/efi/EFI/fedora/fonts/unicode.pf2;5e73b099, system_u:object_r:boot_t:s0) Operation not supported
error: lsetfilecon: (/boot/efi/EFI/fedora/gcdia32.efi;5e73b099, system_u:object_r:boot_t:s0) Operation not supported

  Upgrading        : grub2-efi-x64-cdboot-1:2.04-10.fc32.x86_64           29/72 
error: lsetfilecon: (/boot/efi/EFI/fedora/gcdx64.efi;5e73b099, system_u:object_r:boot_t:s0) Operation not supported
Comment 11 Pavel Zhukov 2020-04-30 09:11:06 UTC 
*** Bug 1827087 has been marked as a duplicate of this bug. ***
Comment 14 Panu Matilainen 2020-05-27 11:05:28 UTC 
*** Bug 1783201 has been marked as a duplicate of this bug. ***
Comment 15 Javier Martinez Canillas 2020-05-27 13:35:28 UTC 
*** Bug 1798530 has been marked as a duplicate of this bug. ***
Comment 19 Panu Matilainen 2020-06-15 11:33:46 UTC 
*** Bug 1845168 has been marked as a duplicate of this bug. ***
Comment 23 Leon Fauster 2020-07-28 20:41:21 UTC 
These are outputs of CentOS8 but I had the same on RHEL:

While updating EL8.1 to EL8.2

  Ausgeführtes Scriptlet: libgcc-8.3.1-5.el8.0.2.x86_64                                                             1/1422 
  Aktualisieren         : grub2-common-1:2.02-81.el8.noarch                                                         2/1422 
Fehler: lsetfilecon: (/boot/efi/EFI/centos, system_u:object_r:boot_t:s0) Die Operation wird nicht unterstützt
  Aktualisieren         : libreoffice-data-1:6.0.6.1-20.el8.noarch                                                  3/1422 
  Ausgeführtes Scriptlet: libreoffice-data-1:6.0.6.1-20.el8.noarch                                                  3/1422 
  Aktualisieren         : liberation-fonts-common-1:2.00.3-7.el8.noarch     



  Aktualisieren         : nss-tools-3.44.0-15.el8.x86_64                                                 626/1422 
  Aktualisieren         : composer-cli-28.14.42-2.el8_2.x86_64                                           627/1422 
  Aktualisieren         : grub2-efi-x64-1:2.02-81.el8.x86_64                                             628/1422 
Fehler: lsetfilecon: (/boot/efi/EFI/centos/fonts, system_u:object_r:boot_t:s0) Die Operation wird nicht unterstützt
Fehler: lsetfilecon: (/boot/efi/EFI/centos/grubx64.efi;5ee8b714, system_u:object_r:boot_t:s0) Die Operation wird nicht unterstützt
  Aktualisieren         : hyperv-daemons-0-0.28.20180415git.el8.x86_64                                   629/1422 
  Aktualisieren         : samba-4.11.2-13.el8.x86_64                                                     630/1422 
  Ausgeführtes Scriptlet: samba-4.11.2-13.el8.x86_64                                     




 Aktualisieren         : grub2-pc-modules-1:2.02-81.el8.noarch                                           701/1422 
 Aktualisieren         : shim-x64-15-11.el8.x86_64                                                       702/1422 
Fehler: lsetfilecon: (/boot/efi/EFI/BOOT/BOOTX64.EFI;5ee8b714, system_u:object_r:boot_t:s0) Die Operation wird nicht unterstützt
Fehler: lsetfilecon: (/boot/efi/EFI/BOOT/fbx64.efi;5ee8b714, system_u:object_r:boot_t:s0) Die Operation wird nicht unterstützt
Fehler: lsetfilecon: (/boot/efi/EFI/centos/BOOTX64.CSV;5ee8b714, system_u:object_r:boot_t:s0) Die Operation wird nicht unterstützt
Fehler: lsetfilecon: (/boot/efi/EFI/centos/mmx64.efi;5ee8b714, system_u:object_r:boot_t:s0) Die Operation wird nicht unterstützt
Fehler: lsetfilecon: (/boot/efi/EFI/centos/shimx64-centos.efi;5ee8b714, system_u:object_r:boot_t:s0) Die Operation wird nicht unterstützt
Fehler: lsetfilecon: (/boot/efi/EFI/centos/shimx64.efi;5ee8b714, system_u:object_r:boot_t:s0) Die Operation wird nicht unterstützt
 Aktualisieren         : mobile-broadband-provider-info-20190618-2.el8.noarch                            703/1422 
 Aktualisieren         : libertas-usb8388-firmware-2:20191202-97.gite8a0f4c9.el8.noarch
Comment 24 Eva Mrakova 2020-07-29 07:14:00 UTC 
Hi Leon, 

on RHEL8, the bug has been fixed in rpm-4.14.3-1.el8. Which version of rpm do you have
on your RHEL system? For older versions of rpm the error messages are expected.
Comment 25 Leon Fauster 2020-07-29 11:25:02 UTC 
We use a custom AMI on AWS which is based on 8.1 and then we do the update, so an older version of rpm.

But good to see that the fix is there (https://bugzilla.redhat.com/show_bug.cgi?id=1765187)

We should update the AMI. Thanks.
Comment 28 errata-xmlrpc 2020-11-04 02:03:16 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (rpm bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:4561
Note You need to log in before you can comment on or make changes to this bug.