eTrust blocks cronie-anacron from updating in Linux

After running yum update -y or just yum update -y cronie-anacron, I get the following error:

 Running Transaction
  Updating   : cronie-anacron-1.4.4-15.el6.x86_64                           1/2
 Error unpacking rpm package cronie-anacron-1.4.4-15.el6.x86_64
 error: unpacking of archive failed on file 
 /etc/cron.hourly/0anacron;56e79ac7: cpio: open
   Verifying  : cronie-anacron-1.4.4-15.el6.x86_64                           1/2
 cronie-anacron-1.4.4-12.el6.x86_64 was supposed to be removed but is not!
   Verifying  : cronie-anacron-1.4.4-12.el6.x86_64                           2/2

 Failed:
  cronie-anacron.x86_64 0:1.4.4-12.el6   cronie-anacron.x86_64 0:1.4.4-15.el6

Complete!

This line caught my attention

error: unpacking of archive failed on file /etc/cron.hourly/0anacron;56e79ac7: cpio: open

yum is unable to unpack the package. I find out I cannot create files in /etc/cron.hourly/.

# pwd
/etc/cron.hourly
# touch test
touch: cannot touch `test': Permission denied

If I cannot to do this as root, there is something else that is blocking it. Since we run eTrust AccessControl in the server, I decided to turn it off

# secons -s
CA ControlMinder secons v12.80.0.1702 - Console utility
Copyright (c) 2013 CA. All rights reserved.
CA ControlMinder is now DOWN !

Try to update again

Running Transaction
  Updating   : cronie-anacron-1.4.4-15.el6.x86_64                           1/2
  Cleanup    : cronie-anacron-1.4.4-12.el6.x86_64                           2/2
  Verifying  : cronie-anacron-1.4.4-15.el6.x86_64                           1/2
  Verifying  : cronie-anacron-1.4.4-12.el6.x86_64                           2/2

Updated:
  cronie-anacron.x86_64 0:1.4.4-15.el6

Complete!

It works! I don’t know why but if you are running eTrust AccessControl and you are stuck with something when everything else looks good, turn off eTrust.

Turn on eTrust

# seload
CA ControlMinder seload v12.80.0.1702 - Loader Utility
Copyright (c) 2013 CA. All rights reserved.
15 Mar 2016 00:25:37> WAKE_UP : Server going up
15 Mar 2016 00:25:37> INFO    : Filter mask: 'WATCHDOG*' is registered
15 Mar 2016 00:25:37> INFO    : Filter mask: 'INFO    : Setting PV*' is registered
15 Mar 2016 00:25:37> INFO    : Filter mask: 'INFO    : DB*' is registered
15 Mar 2016 00:25:37> INFO    : Filter mask: '*seosd.trace*' is registered
15 Mar 2016 00:25:37> INFO    : Filter mask: '*FILE*secons*(*/log/*)*' is registered
Starting seosd. PID = 4466.
Checking database ...
Starting seagent. PID = 4468
seagent: Loading database image...
Starting seoswd. PID = 4471
seagent: Initialization phase completed
Executing [daemons] command: /opt/CA/AccessControl/bin/selogrd
Starting selogrd. PID = 4480
selogrd: Multiple instances are not supported.
Executing [daemons] command: /opt/CA/AccessControl/bin/serevu
Starting serevu. PID = 4483
Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s