[From nobody Sat Jul 11 12:09:06 2026
Received: (at 1141854-done) by bugs.debian.org; 11 Jul 2026 11:06:52 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
 (2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-111.6 required=4.0 tests=ALL_TRUSTED,BAYES_00,
 DKIMWL_WL_HIGH,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,
 FROMDEVELOPER,HAS_BUG_NUMBER,SPF_HELO_NONE,SPF_PASS,
 USER_IN_DKIM_WELCOMELIST,VERSION autolearn=ham autolearn_force=no
 version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 13; hammy, 135; neutral, 21; spammy,
 1. spammytokens:0.851-+--responsible
 hammytokens:0.000-+--Hx-spam-relays-external:sk:stravin,
 0.000-+--H*RT:sk:stravin, 0.000-+--Hx-spam-relays-external:311,
 0.000-+--H*RT:311, 0.000-+--H*RT:108
Return-path: <smcv@debian.org>
Received: from stravinsky.debian.org ([2001:41b8:202:deb::311:108]:36274)
 by buxtehude.debian.org with esmtps
 (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from <smcv@debian.org>) id 1wiVXn-004ZZK-2A
 for 1141854-done@bugs.debian.org; Sat, 11 Jul 2026 11:06:51 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debian.org; 
 s=smtpauto.stravinsky;
 h=X-Debian-User:In-Reply-To:Content-Type:MIME-Version:
 References:Message-ID:Subject:To:From:Date:Reply-To:Cc:
 Content-Transfer-Encoding:Content-ID:Content-Description;
 bh=Qbe9JF0ZLlAkMZU7Uiy0Ir1DyRRYV+Hq7OJJCLVttBg=; b=bjM3ap3Zm9yfxuSqwPryfhQI/T
 ZSUCVvXo8gX2LuVx+nbkXKIrrN4nzd0bF5SEspCfpMX03CmYx+HSoc+jRGlQ5F4jAQHtJ2DqRTV6W
 uCJXk+jwl4p87f5u8c/qjRSB3/QvmEbR9JFpJ2n1CW87UaZmCmkwxzYQdqrdAbKTOhoaQk61NnqE7
 6wFCZyO4qelWP0z4fRYRoq7P8RxeCnyfGUzrWgkeOh6y81SwNNuEOHJKzK3/ur1fmSk4jSF0phGon
 6Kr/b6cNxp4whQn5Njdw8kbgZtqApP/7iOzfP9JK3NS1xIBppl5zAE6e29oXOsKtMvdDRA0Rq62WB
 2SCoQfZQ==;
Received: from authenticated-user by stravinsky.debian.org with esmtpsa
 (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from <smcv@debian.org>) id 1wiVXk-005Cok-2i;
 Sat, 11 Jul 2026 11:06:48 +0000
Date: Sat, 11 Jul 2026 12:06:46 +0100
From: Simon McVittie <smcv@debian.org>
To: Sven Joachim <svenjoac@gmx.de>, 1141854-done@bugs.debian.org
Subject: Re: Bug#1141854: libselinux1: fails to upgrade in initless chroots
Message-ID: <alIjxhzWxo49U7Fe@definition.pseudorandom.co.uk>
References: <87qzl9vqb6.fsf@turtle.gmx.de>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Disposition: inline
In-Reply-To: <87qzl9vqb6.fsf@turtle.gmx.de>
X-Debian-User: smcv

Version: 3.11-2

On Sat, 11 Jul 2026 at 11:17:01 +0200, Sven Joachim wrote:
>As had been noticed in #1140305[1], upgrading systems where no provider
>of systemd-tmpfiles has been installed yet fails due to a circular
>dependency.

I was about to suggest moving the tmpfiles.d snippet to a non-library
package, but Luca Boccassi was way ahead of me, and it seems this was
resolved in libselinux_3.11-2 by moving the tmpfiles.d snippet from
libselinux1 to selinux-utils.

That seems like an appropriate solution to me: merely installing libselinux
(or libapparmor) shouldn't try to set up system-wide integration with
SELinux (or AppArmor), and it seems more appropriate for a higher-level 
package like policycoreutils (or apparmor) to be responsible for that.

     smcv]