[Pkg-utopia-maintainers] Bug#864479: boot failure due to ambiguous SELinux config

[Simon McVittie]

Control: reassign 864479 dbus,selinux-utils

On Fri, 09 Jun 2017 at 10:33:37 +0200, Christian Göttsche wrote:
> When booting with a kernel cmdline 'security=selinux' and a
> /etc/selinux/config setting 'SELINUX=disabled', dbus fails to start
> and thereby systemd-logind and the system is unusable:
> 
> Jun 08 16:23:43 server02 systemd[1]: Started D-Bus System Message Bus.
> Jun 08 16:23:43 server02 dbus-daemon[703]: Failed to set up security
> class mapping (selinux_set_mapping():Invalid argument).
> Jun 08 16:24:08 server02 systemd[1]: dbus.service: Main process
> exited, code=exited, status=1/FAILURE

I'm very tempted to say "you asked for it, you got it" - you seem to have
tried to arrange for SELinux to be both enabled and disabled.

SELinux maintainers: please try to work out what should happen here, and
what needs to change to make that happen? If the answer is that changes in
dbus are needed, I'm happy to apply properly justified patches, but I need
to know what those changes are and why they are correct.

I am an upstream maintainer of dbus, so if a proposed change is justified
properly and someone who knows SELinux approves it, I can apply it
upstream; but conversely I am not going to be applying downstream
changes to dbus in Debian if they are not good enough for upstream.

Thanks,
    S