[DSE-Dev] Bug#747106: selinux-policy-default: Unistalling selinux-policy-default is buggy

[Victor Porton]

Package: selinux-policy-default
Version: 2:2.20140421-1
Severity: important

Dear Maintainer,

First I ran:

# apt-get remove selinux-policy-default

After reboot the policy was not removed and X11 hasn't started.

That it was not removed by `apt-get remove` is the first bug.

The second bug:

I ran

# dpkg --purge selinux-policy-default

After this system hasn't rebooted at all saying "kernel panic" about
not able to find policy.29 file.

The thing I want, is to remove selinux-policy-default without complete
uninstallation of SELinux, in order that I could test my own little
security policy (what I cannot do with selinux-policy-default installed
because selinux-policy-default is too buggy (particularly X doesn't start).

*** Reporter, please consider answering these questions, where appropriate ***

   * What led up to the situation?
   * What exactly did you do (or not do) that was effective (or
     ineffective)?
   * What was the outcome of this action?
   * What outcome did you expect instead?

*** End of the template - remove these template lines ***


-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (500, 'stable')
Architecture: i386 (x86_64)

Kernel: Linux 3.10-2-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages selinux-policy-default depends on:
ii  libpam-modules   1.1.8-3
ii  libselinux1      2.2.2-1
ii  libsepol1        2.2-1
ii  policycoreutils  2.2.5-1
ii  python           2.7.5-5
ii  selinux-utils    2.2.2-1

Versions of packages selinux-policy-default recommends:
ii  checkpolicy  2.2-1
ii  setools      3.3.8-3

Versions of packages selinux-policy-default suggests:
pn  logcheck        <none>
pn  syslog-summary  <none>

-- Configuration Files:
/etc/selinux/default/modules/active/file_contexts.local [Errno 13] Permission denied: u'/etc/selinux/default/modules/active/file_contexts.local'

-- no debconf information