Tom London wrote:

Running 'setfiles -vv $FC /lib' produces:

setfiles: labeling files under /lib setfiles: relabeling /lib/tls/i586/libdb-4.2.so from system_u:object_r:shlib_t to system_u:object_r:lib_t setfiles: conflicting specifications for /lib/tls/i486/libdb-4.2.so and /lib/tls/i586/libdb-4.2.so, using system_u:object_r:shlib_t. setfiles: relabeling /lib/tls/i486/libdb-4.2.so from system_u:object_r:lib_t to system_u:object_r:shlib_t

Suggest this patch:

--- types.fc 2004-09-23 11:02:38.000000000 -0700 +++ /tmp/types.fc 2004-09-24 22:35:40.913346939 -0700 @@ -302,7 +302,7 @@ /lib(64)?/[^/]*/lib[^/]*.so(.[^/]*)* -- system_u:object_r:shlib_t /lib(64)?/security/[^/]*.so(.[^/]*)* -- system_u:object_r:shlib_t /lib(64)?/tls/i686/cmov/[^/]*.so(.[^/]*)* -- system_u:object_r:shlib_t -/lib(64)?/tls/i486/[^/]*.so(.[^/]*)* -- system_u:object_r:shlib_t +/lib(64)?/tls/i[456]86/[^/]*.so(.[^/]*)* -- system_u:object_r:shlib_t

# # /sbin

tom

/lib(64)?/tls/i.86/[^/]*.so(.[^/]*)* -- system_u:object_r:shlib_t

is already in the latest policy.