Wednesday, February 10, 2010

TimeBox Management

Time boxing is a project management technique commonly used in software development projects. It is primarily meant for Rapid Application Development (RAD) environments with key focus being the time constraint.


Basically a project follows the Agile software development methodology, where in, the full scope is split into multiple smaller components, each component having its own timelines, budget and milestones. The aim is to achieve the prime objectives by continuously prioritizing and flexing requirements. The project is progressively elaborated as completing individual chunks gives better visibility and decision-making ability.

Though the scope is pre-determined, it is possible that the outcome could differ because of the adaptive approach. The ultimate outcome is the desired result that the users require.


The traditional project management approach involves three prime constraints - Time, Cost and scope (Quality may also be included optionally). This is termed the triple constraint factor of Project management. The scope is pre-determined and fixed at the start of the project. Time and cost are managed to ensure that the required scope is achieved. In case of inevitable circumstances deadlines may slip or project may be crashed or fast tracked to achieve the scope. With time box management, the deadline is what is fixed and the scope is modifiable as activities are accomplished.


The traditional approach would require a Project Manager to ensure that thorough analysis and planning is done to identify all deliverables and plan all activities and schedules to the bone. TimeBox management involves performing a reasonable level of planning and getting on with the actual work, a bit at a time. Things become clearer as each milestone is achieved and analyzed.


I believe most RAD software development have knowingly or unknowingly been using time box technique to keep user satisfied. So if the saying "Scope cannot be frozen" is applicable to your site, TimeBox management is the right tool.

There are TimeBox project management tools available but I haven't used any.
 
When performing IT Audit at a site, it important that the auditor understand what Project management methodology is being followed. TimeBox approach might give the impression that there is lot of scope creep, but then that would possibly be the reason why this approach is being taken.

Friday, February 5, 2010

Moving my site postings to Blogs

Hi Folks,
Thank you all for your continued support and feedback though the years. This is to update you that I am moving my website postings to blogs. This will allow me to achieve better control and meet the traffic needs. It will also allow you as readers to post comments on my blogs directly and carry out healthy debates. This also ensures that I am not invading your mail box without your consent (spam?).

To subscribe to one or more of my blogs, please read through this page. I am currently hosting Oracle, Oracle Apps, Linux, CISA and General IT blogs. Please note, you need to subscribe to continue receiving auto-updates. I will not be sending direct emails to individuals.


Below mentioned are the different blogs I write at.

Oracle blog - http://oracle-repo.blogspot.com/feeds/posts/default
This is the oldest blog I have been writing on for almost 10 years now. Deals with postings on Oracle Database administration, programming and Solutions Design.

Oracle Apps blog - http://oracleapps-repo.blogspot.com/feeds/posts/default
I had stopped this in between due to time constraints, decided to get it rolling again. If you work in or want to learn Apps, give this a try.

Linux blog - http://linux-repo.blogspot.com/feeds/posts/default
This is also one of the oldest blogs but I have written very few notes. I intend to gear up this area and provide readers with more postings on my experience with Linux and Open Source software.

CISA blog -  http://cisa-repo.blogspot.com/feeds/posts/default
I have started this blog to publish CISA related articles to aid aspirants with their examination studies and keep already certified folks in touch with the base.

General IT blog - http://amar-padhi.blogspot.com/feeds/posts/default
This is a general IT blog where I would be ranting on the extreme things I try out related to Technology, and general news on where IT is going.


What is RSS?
RSS stands for Real Simple Syndication. It basically is an internet service that allows updates on a site to be automatically pushed to all subscribers. The term used for such updates is "Feed". You as a reader decide on which site you want to stay connected with by subscribing to their feed. For instance, if you would like to receive regular news updates, you can choose from the hoards of news sites out there. All latest web publication get delivered to your RSS reader/client automatically.

There are many popular online Feed readers such as Google Reader, Yahoo reader, bloglines etc. Apart from this you can also use your email client as RSS reader. Most popular email clients such as Outlook, Thunderbird and Evolution very well support this feature.

New to RSS? Read further to start using and join millions of web users out there.


How to subscribe?

It is really simple. In order to receive updates from a site, you need two things - an RSS Reader and the site URL.

  • If you have an online RSS reader, open one or more of the above links in Internet browser and choose "Subscribe to this feed..". Provide your favorite reader.

  • If you want to receive updates in your mail box, right click on the "RSS Feed" entry in your Folder listing and subscribe. Provide the above URL to switch on the subscription.

How to configure email client?

As mentioned above most email clients come equipped with RSS Feed support. Here is a screenshot of how my Thunderbird Feed looks like. It is simple setup here.









Same can be achieved in Outlook client also. From the Tools Menu, click Account Settings. On the RSS Feed Tab press new and provide the above mentioned links.

Thursday, February 4, 2010

Segregation or Separation of Duties (SoD) vital to prevent Fraud

"In 2007, Japan-based electronics company NEC discovered a US $18 million fraud carried out by 18 people. “The fraudulent transactions involved the trading of intangible assets such as services and construction,” according to a May 31, 2007, CFO.com report. “The company explained that the fraud was not discovered for some time because the system enabled validation of the orders through confirmation by the same employees that made the orders.”
Above excerpt is from Institute of Internal Auditor's site, read more at http://www.theiia.org/intAuditor/itaudit/2009-articles/segregated-duties-in-fashion/ site.

The control required to prevent individuals from having conflicting functions is referred to as segregation of duties (SoD) or Separation of Duties.

CISA mandates that Management takes proper initiative to ensure SoD in all areas of work. This is a very vital Preventive Control to prevent Fraudulent activities and achieve better control on the laid down processes. The Approver should always be an entity not involved in the actual transaction. To that matter, even the IS auditor should be independent of the business (should not have any vested interest or gains, directly or indirectly). Any deviation from SoD should be well documented, communicated and proper compensatory controls built-in.

Wednesday, February 3, 2010

Installing Oracle Apps 11i on Linux (Part 2)

Install software
Trigger the rapidwiz installation

[oracle@amar rapidwiz]$ cd /home/oracle/app/product/Stage11i/startCD/Disk1/rapidwiz
[oracle@amar rapidwiz]$ ./rapidwiz


Change the database name from "VIS" to "vis" for lower case context names.


The log file path is displayed in the command prompt from where the rapidinstall was invoked.

[oracle@amar rapidwiz]$ Database logfile - /home/oracle/apps/visdb/9.2.0/appsutil/log/VIS_amar/12150705.log
While the process is running keep the running log file in the background to identify errors.

tail -f /home/oracle/apps/visdb/9.2.0/appsutil/log/VIS_amar/12150705.log


Once the database setup is over. The command window will display the application log file also.
Appltop logfile - /home/oracle/apps/visappl/admin/vis_amar/log/12160832.log

Now tail this to identify application installation related errors.

You may or may not encounter the below errors, but I have documented it here for reference purpose.

ERROR 1
Error encountered during the installation process in front-end :-
RW-50004: Error code received when running external process. Check log file for details. Running Database install driver for VIS instance.

Navigate to the log directory and check the log error. If you had the running log screen, you can see the error shown there. My log had the following error-

Statusstring Executing Command: InstantiateFile -d addbtmpl.drv
Cannot execute configure of environment for database ORACLE_HOME

    RW-50010: Error: - script has returned an error:   1
RW-50004: Error code received when running external process.  Check log file for details.
Running Database Install Driver for VIS instance


Also check the dbInstancecfg.log file in the same folder to find the last script that failed.
        

  [SETUP PHASE]
  AutoConfig could not successfully execute the following scripts:
    Directory: /home/oracle/apps/visdb/9.2.0/appsutil/install/VIS_amar
      afmkinit.sh             INSTE8_SETUP       127

AutoConfig is exiting with status 1

 

Metalink note 747424.1 has more details on this. Following steps were followed -

1. Edit the <9i RDBMS_ORACLE_HOME>/appsutil/bin/adgetlnxver.sh file as below
2. Alter  by replacing all occurances of LD_ASSUME_KERNEL with XD_ASSUME_KERNEL
3. Press the retry button in rapidwiz screen


ERROR 2

Cannot create control file for vis

    RW-50010: Error: - script has returned an error:   1
RW-50004: Error code received when running external process.  Check log file for details.
Running Database Install Driver for vis instance
Database Availability Check


Navigate to $ORACLE_HOME/appsutil/log// folder and open adcrdb_vis.txt. Following error may be present.

SQL> startup nomount;
ORA-27125: unable to create shared memory segment
Linux Error: 1: Operation not permitted


The solution given in metalink for settinv the "vm.disable_cap_mlock=1" in sysctl.conf file does not work for Fedora 12. Do the following instead -

cd $ORACLE_HOME/bin
mv oracle oracle.bin
cat >oracle <<"EOF"
#!/bin/bash

export DISABLE_HUGETLBFS=1
exec $ORACLE_HOME/bin/oracle.bin $@
EOF

chmod +x oracle

E.g :-
[oracle@amar bin]$ mv oracle oracle.bin
[oracle@amar bin]$ ls -lrt oracle*
-rwsr-s--x. 1 oracle oinstall 52987082 2009-12-16 16:27 oracleO
-rwsr-s--x. 1 oracle oinstall 52987082 2009-12-16 16:28 oracle.bin
[oracle@amar bin]$ cat >oracle <<"EOF"
> #!/bin/bash
> export DISABLE_HUGETLBFS=1
> exec $ORACLE_HOME/bin/oracle.bin $@
> EOF
[oracle@amar bin]$ more oracle
#!/bin/bash
export DISABLE_HUGETLBFS=1
exec $ORACLE_HOME/bin/oracle.bin $@
[oracle@amar bin]$ chmod +x oracle
[oracle@amar bin]$ ls -lrt oracle*
-rwsr-s--x. 1 oracle oinstall 52987082 2009-12-16 16:27 oracleO
-rwsr-s--x. 1 oracle oinstall 52987082 2009-12-16 16:28 oracle.bin
-rwxr-xr-x. 1 oracle oinstall       75 2009-12-16 20:26 oracle


Optionally, I also navigated down to $ORACLE_HOME/dbs folder and modified the initvis.ora file to reduce the size of following parameter. This is not required though.

pga_aggregate_target=200M

Retry the process again. If it does not work, abort the process and restart the rapidwiz again.
[oracle@amar rapidwiz]$ ./rapidwiz -restart
Specify the parameter file that you saved earlier during the first run. The runtime will autoselect all the parameters and continue from where it left.


Error 3
Statusstring Executing Command: InstantiateFile -d addbtmpl.drv

Unable to complete Instance Configuration

    RW-50010: Error: - script has returned an error:   1
RW-50004: Error code received when running external process.  Check log file for details.
Running Database Install Driver for vis instance

Navigate to the log directory and identify the latest generated files by timestamp. Open the installdbf.log file to find the last failed script. In my case it pointed to the afdbprf.sh. The log folder also had an error file with the name afdbprf.txt, which had the below error -

ERROR:
ORA-12541: TNS:no listener

Manually start the listener.

[oracle@amar 9.2.0]$ cd /home/oracle/apps/visdb/9.2.0
[oracle@amar 9.2.0]$ . ./vis_amar.env
[oracle@amar 9.2.0]$ lsnrctl status

LSNRCTL for Linux: Version 9.2.0.6.0 - Production on 16-DEC-2009 20:40:49

Copyright (c) 1991, 2002, Oracle Corporation.  All rights reserved.

Connecting to (ADDRESS=(PROTOCOL=tcp)(PORT=1521))
TNS-12541: TNS:no listener
 TNS-12560: TNS:protocol adapter error
  TNS-00511: No listener
   Linux Error: 111: Connection refused
[oracle@amar 9.2.0]$ lsnrctl start

LSNRCTL for Linux: Version 9.2.0.6.0 - Production on 16-DEC-2009 20:41:00

Copyright (c) 1991, 2002, Oracle Corporation.  All rights reserved.

Starting /home/oracle/apps/visdb/9.2.0/bin/tnslsnr: please wait...

TNSLSNR for Linux: Version 9.2.0.6.0 - Production
System parameter file is /home/oracle/apps/visdb/9.2.0/network/admin/vis_amar/listener.ora
Log messages written to /home/oracle/apps/visdb/9.2.0/network/log/listener.log
Listening on: (DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=amar.jashanmal.ae)(PORT=1521)))

Connecting to (ADDRESS=(PROTOCOL=tcp)(PORT=1521))
STATUS of the LISTENER
------------------------
Alias                     LISTENER
Version                   TNSLSNR for Linux: Version 9.2.0.6.0 - Production
Start Date                16-DEC-2009 20:41:00
Uptime                    0 days 0 hr. 0 min. 0 sec
Trace Level               off
Security                  OFF
SNMP                      OFF
Listener Parameter File   /home/oracle/apps/visdb/9.2.0/network/admin/vis_amar/listener.ora
Listener Log File         /home/oracle/apps/visdb/9.2.0/network/log/listener.log
Listening Endpoints Summary...
  (DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=amar.localdomain.com)(PORT=1521)))
The listener supports no services
The command completed successfully
[oracle@amar 9.2.0]$ lsnrctl status

LSNRCTL for Linux: Version 9.2.0.6.0 - Production on 16-DEC-2009 20:41:12

Copyright (c) 1991, 2002, Oracle Corporation.  All rights reserved.

Connecting to (ADDRESS=(PROTOCOL=tcp)(PORT=1521))
STATUS of the LISTENER
------------------------
Alias                     LISTENER
Version                   TNSLSNR for Linux: Version 9.2.0.6.0 - Production
Start Date                16-DEC-2009 20:41:00
Uptime                    0 days 0 hr. 0 min. 12 sec
Trace Level               off
Security                  OFF
SNMP                      OFF
Listener Parameter File   /home/oracle/apps/visdb/9.2.0/network/admin/vis_amar/listener.ora
Listener Log File         /home/oracle/apps/visdb/9.2.0/network/log/listener.log
Listening Endpoints Summary...
  (DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=amar.localdomain.com)(PORT=1521)))
Services Summary...
Service "vis" has 1 instance(s).
  Instance "vis", status READY, has 1 handler(s) for this service...
The command completed successfully


Click on "retry" button.



ERROR 4
At the end of installation, most of the verification failed -

DBC File Check

   RW-00023: Error: - DBC file was not created:
      File = /home/oracle/apps/visappl/fnd/11.5.0/secure/vis_amar/vis.dbc

HTTP Check

   checking URL = http://amar.localdomain.com:8000
   RW-50015: Error: - Portal is not responding. The service might not have started on the port yet. Please check the service and use the retry button.

JSP Check

   checking URL = http://amar.localdomain.com:8000/OA_HTML/jsp/fnd/fndhelp.jsp?dbc=/home/oracle/apps/visappl/fnd/11.5.0/secure/vis_amar/vis.dbc
   RW-50015: Error: - JSP is not responding. The service might not have started on the port yet. Please check the service and use the retry button.

PHP Check

   checking URL = http://amar.localdomain.com:8000/OA_HTML/US/ICXINDEX.htm
   RW-50015: Error: - Login Page is not responding. The service might not have started on the port yet. Please check the service and use the retry button.


The logfile will give the exact files that are failing.

Some script is setting the LD_ASSUME_KERNEL from within APPS. On further digging, it was identified that the environment file /home/oracle/apps/visappl/vis_amar.env is setting this (it is internally calling some other script for this). Modify the file and add the below line at the end of the file to unset the parameter.

# 17-Dec-09 | Amar | unset the kernel par
unset LD_ASSUME_KERNEL



Login to sqlplus (from the database tier) and check data in FND_NODES table

SQL> select node_name,server_address from fnd_nodes;

NODE_NAME             |SERVER_ADDRESS
----------------------|------------------------------
AMAR                  |


Update the server_address, if empty, with the server IP.

SQL> update fnd_nodes set server_address = '192.6.14.230' where node_name = 'AMAR';

Set the midtier environment varialbles and run the adautoconfig.sh file.
[oracle@amar ~]$ . /home/oracle/apps/visora/8.0.6/vis_amar.env
[oracle@amar ~]$ . /home/oracle/apps/visappl/vis_amar.env
[oracle@amar ~]$ cd $COMMON_TOP/admin/scripts/vis_amar/
[oracle@amar vis_amar]$ ./adautocfg.sh

Above will fail for adgendbc.sh file continue. Change the variable again. Manually run the adgendbc.sh file to generate the dbc file.
[oracle@amar ~]$ cd /home/oracle/apps/viscomn/admin/install/vis_amar/
[oracle@amar vis_amar]$ ./adgendbc.sh apps apps Yes Yes Yes Yes


Review the generated dbc file to ensure that settings are correct. Now start other services also.

[amar@amar ~]$ su - oracle
Password:
[oracle@amar ~]$ . /home/oracle/apps/visora/8.0.6/vis_amar.env
[oracle@amar ~]$ . /home/oracle/apps/visappl/vis_amar.env
[oracle@amar ~]$ echo $ORACLE_HOME
/home/oracle/apps/visora/8.0.6
[oracle@amar ~]$ echo $APPL_TOP
/home/oracle/apps/visappl
[oracle@amar ~]$ echo $LD_ASSUME_KERNEL

[oracle@amar ~]$
[oracle@amar ~]$ cd $COMMON_TOP/admin/scripts/vis_amar
[oracle@amar vis_amar]$ ./adstpall.sh apps/apps &
[oracle@amar vis_amar]$ ./adstrtal.sh apps/apps &


Check logfile /home/oracle/apps/viscomn/admin/log/vis_amar/12171245.log for details

Exiting with status 2


The process this time started most of the services but 806 Listerner and Discoverer failed. Tail the above provided log file to verify this.


**Service Control Execution Report]**

  Service                                 Script         Status

  Oracle Apache Server vis_amar             adapcctl.sh      Started
  OracleTNSListener80APPS_vis_amar          adalnctl.sh      Failed
  OracleConcMgrvis_amar                     adcmctl.sh       Started
  OracleFormsServer-Forms60vis_amar         adfrmctl.sh      Started
  OracleReportServer-Rep60_vis              adrepctl.sh      Started
  Oracle Metrics Client vis_amar            adfmcctl.sh      Started
  Oracle Metrics Server vis_amar            adfmsctl.sh      Started
  Oracle Fulfillment Server vis_amar        jtffmctl.sh      Started
  Oracle Discoverer services vis_amar       addisctl.sh      Failed
  Oracle Restricted Apache Server vis_amar  adaprstctl.sh    Disabled
  Oracle Apache Server vis_amar for PL/SQL  adapcctl.sh      Disabled
  Oracle TCF SocketServer vis_amar          adtcfctl.sh      Disabled
  Oracle ICSM vis_amar                      ieoicsm.sh       Disabled
  Oracle iProcurement Bulk Loader vis_amar  icxblkctl.sh     Disabled

ServiceControl is exiting with status 2

Edit $AD_TOP/bin/adgetlnxver.sh and comment all LD_ASSUME_KERNEL lines, followed by unset option.
                #LD_ASSUME_KERNEL="2.4.21"
                #export LD_ASSUME_KERNEL
                unset LD_ASSUME_KERNEL

Run autoconfig again to rectify all links.


ERROR 5
Forms runtime is getting invoked with an error (from a windows client maching or Virtual Machine). Screen shows below error -

FRM-92050: Failed to connect to the Server: amar.jashanmal.ae:9000
Details...
Java Exception:
java.io.EOFException
at java.io.DataInputStream.readInt(Unknown Source)


Following error shows up in Apache error log -
"client denied by server configuration: /home/oracle/apps/viscomn/java/oracle/apps/fnd/formsClient/FormsLauncher.class"


Do a telnet to the port showing error (same machine).

[oracle@amar ~]$ telnet amar.localdomain.com 9000
Trying 192.6.14.130...
telnet: connect to address 192.6.14.130: Connection refused

 
Note 228610.1 applied here. Set the midtier environment variables and do the following -

[oracle@amar visappl]$ cd $FND_TOP/bin
[oracle@amar bin]$ ldd f60webmx | grep -i "not found"
                libXm.so.2.1 => not found

[oracle@amar bin]$ f60webmx
f60webmx: error while loading shared libraries: libXm.so.2.1: cannot open shared object file: No such file or directory


This is a motif library issue.
[oracle@amar bin]$ locate libXm.so.2.1
/home/oracle/apps/visora/8.0.6/lib/stubs/libXm.so.2.1
/home/oracle/apps/visora/iAS/lib/stubs/libXm.so.2.1

Download openmotif from http://www.motifzone.net/filebrowser, copy the rpm to the vislib library folder. Get the latest Fedora version that is 32-bit.

Extract the rpm to the vislib library folder we created earlier.
[root@amar vislib]# rpm2cpio openmotif-2.3.0-1.fc8.i386.rpm | cpio -idmv


Above creates a subfolder under by custom vislib/usr folder (/home/oracle/apps/vislib/usr/X11R6/lib). Navigate to this folder and create additional symbolic links.

ln -s libXm.so.4.0.0 libXm.so.2.1

Modify the LD_LIBRARY_PATH and test f60webmx again.

[oracle@amar bin]$ export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/home/oracle/apps/vislib/usr/X11R6/lib
[oracle@amar bin]$ f60webmx

No error is displayed now. To make the change permanent, let us change the original environmet files. Edit the following files and modify the LD_LIBRARY_PATH to include the new library folder.

/home/oracle/apps/visora/8.0.6/vis_amar.env

- restart the forms services.
[oracle@amar vis_amar]$ ./adfrmctl.sh start &
[oracle@amar vis_amar]$ ./adfmsctl.sh start &
[oracle@amar vis_amar]$ ./adfmcctl.sh start &


 
ERROR 6
Reports server error.  Note 404500.1 applied here.

[oracle@amar bin]$ pwd
/home/oracle/apps/visappl/fnd/11.5.0/bin

[oracle@amar bin]$ ./ar60run
./ar60run: relocation error: /home/oracle/apps/visora/8.0.6/network/jre11/lib/i686/native_threads/libjava.so: symbol __libc_wait, version GLIBC_2.0 not defined in file libc.so.6 with link time reference

[oracle@amar apps]$ adrelink.sh force=y "fnd ar60run"
..
/usr/lib/gcc/i686-redhat-linux/4.4.2/libgcc_s.so: undefined reference to `dl_iterate_phdr@GLIBC_2.2.4'
/usr/lib/gcc/i686-redhat-linux/4.4.2/libgcc_s.so: undefined reference to `__stack_chk_fail@GLIBC_2.4'
..

Download and apply patch 3006854 to create the /etc/libcwait.so file.

[root@amar 3006854]# pwd
/home/oracle/apps/vislib/3006854
[root@amar 3006854]# ls -lrt
total 8
-rw-rw-r--. 1 root root 1360 2005-03-18 16:03 README.txt
-rw-r--r--. 1 root root 1254 2005-03-18 16:11 rhel3_pre_install.sh
[root@amar 3006854]# pwd
/home/oracle/apps/vislib/3006854
[root@amar 3006854]# . ./rhel3_pre_install.sh
Applying patch...
Ensuring permissions are correctly set...
Done.
Patch successfully applied


Rerunning the adrelink.sh gave the same error as above, but directly calling the ar60run did not produce the error anymore. Copy the backup file (that would have been renamed by adrelink.sh) to its original state.

[oracle@amar bin]$ cp -pv ar60run.sav ar60run


After Note 
SeLinux issue
My SeLinux policy trapped al access to the libcwait.so file and the errors where displayed in the console.
SELinux is preventing /usr/libexec/fprintd from executing /etc/libcwait.so.
SELinux has denied the fprintd from executing /etc/libcwait.so.

SELinux is preventing /lib/dbus-1/dbus-daemon-launch-helper from executing /etc/libcwait.so.
SELinux has denied the dbus-daemon-lau from executing /etc/libcwait.so.

SELinux is preventing /usr/bin/xauth from executing /etc/libcwa.so.
SELinux has denied the xauth from executing /etc/libcwait.so.

SELinux is preventing /sbin/unix_chkpwd from executing /etc/libcwait.so.
SELinux has denied the unix_chkpwd from executing /etc/libcwait.so.

Rebooting the system prevent me from logging in, probably because selinux was blockign unix_chkpwd from proceeding. I popped in the recovery CD and used chroot to disable selinux. I rebooted and logged in and enabled selinux with above access being enabled.

I checked bugzilla and identified that some bugs are registered that are fixed in latest update of selinux-policy-3.6.32-56.fc12 that is available as of this time. I installed the latest version to verify if it works out.

[root@amar ~]# rpm -qa | grep -i selinux-policy
selinux-policy-3.6.32-41.fc12.noarch
selinux-policy-targeted-3.6.32-41.fc12.noarch

[root@amar ~]# yum install selinux-policy

[root@amar ~]# rpm -qa | grep -i selinux-policy
selinux-policy-3.6.32-56.fc12.noarch
selinux-policy-targeted-3.6.32-41.fc12.noarch

The above update did not entirely resolve the issue. So I decided to keep the SeLinux option disabled till further updates.

Discover Service
Discover service pukes error on startup. I have not done anything to fix this as this service is not used by me or my clients. However, if you need this service, give it some try. If it does not come up, send me a note and I will look it up at my end.

--- End of Note ---