[DSE-Dev] Bug#823287: selinux-basics: System cannot boot with SELinux enabled after upgrade
Jonathan Yu
jawnsy at cpan.org
Tue May 3 03:51:55 UTC 2016
Package: selinux-basics
Version: 0.5.4
Severity: grave
Justification: renders package unusable
Dear Maintainer,
Thank you for your work bringing SELinux to Debian!
I regret that my knowledge of both SELinux and systemd is limited, so I do not
know what diagnostics to collect or how to collect it. That said, I can
reproduce this problem at will, and I'm happy to collect whatever diagnostics
you need.
* What led up to the situation?
I upgraded my system doing full-upgrade. My system is mainly 'testing' with
some packages coming from 'unstable' (I tried updating to the newer
selinux-utils in unstable, but to no avail).
Unfortunately there are not much diagnostics provided during boot, and I
could not find any trace of the failed boots in journalctl or in files
in /var/log, presumably because the problems occurred at such an early
stage of boot. I checked /var/log/syslog, but did not find much informative.
* What exactly did you do (or not do) that was effective (or
ineffective)?
* What was the outcome of this action?
Removing the "selinux=1 security=selinux" flags from grub allowed me to boot.
I then used "selinux-activate disabled" to disable SELinux while we sort
these issues out.
I also tried running "selinux-activate disabled" and re-activating it again,
as it seems to do something with restorecond on first boot after activation.
Unfortunately this did not change anything :(
* What outcome did you expect instead?
I expected that my system could continue booting. I've never had significant
issues with Debian upgrades (thanks to careful maintainers like you :) and
guess that there must be something strange about the way my system is
configured.
There was some interesting-looking output in /var/log/audit; here's a
section:
May 2 20:31:38 theory systemd[1]: Listening on CUPS Scheduler.
May 2 20:31:38 theory systemd[1]: Listening on D-Bus System Message Bus Socket.
May 2 20:31:38 theory systemd[1]: apt-daily.timer: Adding 7h 21min 31.345143s random time.
May 2 20:31:38 theory systemd[1]: Started Daily apt activities.
May 2 20:31:38 theory systemd[1]: Started Daily Cleanup of Temporary Directories.
May 2 20:31:38 theory systemd[1]: Reached target Timers.
May 2 20:31:38 theory systemd[1]: Started CUPS Scheduler.
May 2 20:31:38 theory systemd[1]: Reached target Paths.
May 2 20:31:38 theory systemd[1]: Listening on Virtual machine lock manager socket.
May 2 20:31:38 theory systemd[1]: Listening on mpd.socket.
May 2 20:31:38 theory systemd[1]: Listening on Virtual machine log manager socket.
May 2 20:31:38 theory systemd[1]: Reached target Sockets.
May 2 20:31:38 theory systemd[1]: Reached target Basic System.
May 2 20:31:38 theory systemd[1]: Started Run anacron jobs.
May 2 20:31:38 theory systemd[1]: Starting Accounts Service...
May 2 20:31:38 theory systemd[1]: Starting IIO Sensor Proxy service...
May 2 20:31:38 theory systemd[1]: Starting Restore /etc/resolv.conf if the system crashed before the ppp link was shut down...
May 2 20:31:38 theory systemd[1]: Starting Thermal Daemon Service...
May 2 20:31:38 theory systemd[1]: Starting Modem Manager...
May 2 20:31:38 theory systemd[1]: Started CUPS Scheduler.
May 2 20:31:38 theory systemd[1]: Started D-Bus System Message Bus.
May 2 20:31:38 theory ModemManager[1176]: <info> ModemManager (version 1.4.14) starting in system bus...
May 2 20:31:38 theory dbus-daemon[1183]: Failed to start message bus: Failed to open "/etc/selinux/default/contexts/dbus_contexts": No such file or directory
May 2 20:31:38 theory systemd-udevd[823]: Process '/usr/sbin/alsactl -E HOME=/run/alsa restore 2' failed with exit code 99.
May 2 20:31:38 theory systemd[1]: Failed to subscribe to NameOwnerChanged signal for 'org.freedesktop.thermald': Connection timed out
May 2 20:31:38 theory systemd[1]: Failed to subscribe to NameOwnerChanged signal for 'org.freedesktop.ModemManager1': Connection timed out
May 2 20:31:38 theory systemd[1]: Failed to subscribe to NameOwnerChanged signal for 'net.hadess.SensorProxy': Connection timed out
May 2 20:31:38 theory systemd[1]: Failed to subscribe to NameOwnerChanged signal for 'org.freedesktop.NetworkManager': Connection timed out
May 2 20:31:38 theory systemd[1]: Failed to subscribe to NameOwnerChanged signal for 'org.freedesktop.login1': Connection timed out
May 2 20:31:38 theory systemd[1]: Failed to subscribe to NameOwnerChanged signal for 'org.freedesktop.Accounts': Connection timed out
May 2 20:31:38 theory systemd[1]: Failed to subscribe to activation signal: Connection timed out
May 2 20:31:38 theory systemd[1]: Failed to register name: Connection timed out
May 2 20:31:38 theory systemd[1]: Failed to set up API bus: Connection timed out
May 2 20:31:38 theory systemd[1]: Starting Network Manager...
May 2 20:31:38 theory systemd[1]: Starting LSB: Start the GNUstep distributed object mapper...
May 2 20:31:38 theory systemd[1]: Started Regular background program processing daemon.
May 2 20:31:38 theory systemd[1]: Started Deferred execution scheduler.
May 2 20:31:38 theory ifup[1053]: run-parts: /etc/network/if-up.d/upstart exited with return code 1
May 2 20:31:38 theory systemd[1]: Starting Restorecon maintaining path file context...
May 2 20:31:38 theory ifup[1053]: /sbin/ifup: post-up script failed.
May 2 20:31:38 theory systemd[1]: Starting Initialize hardware monitoring sensors...
May 2 20:31:38 theory systemd[1]: Starting LSB: Load kernel modules needed to enable cpufreq scaling...
May 2 20:31:38 theory systemd[1]: Starting Login Service...
May 2 20:31:38 theory systemd[1]: Starting System Logging Service...
May 2 20:31:38 theory systemd[1]: Starting Permit User Sessions...
May 2 20:31:38 theory systemd[1]: Started Bumblebee C Daemon.
May 2 20:31:38 theory systemd[1]: networking.service: Main process exited, code=exited, status=1/FAILURE
May 2 20:31:38 theory restorecond[1222]: No such file or directory
May 2 20:31:38 theory systemd[1]: Failed to start Raise network interfaces.
May 2 20:31:38 theory systemd[1]: networking.service: Unit entered failed state.
May 2 20:31:38 theory systemd[1]: networking.service: Failed with result 'exit-code'.
May 2 20:31:38 theory systemd[1]: Started IIO Sensor Proxy service.
May 2 20:31:38 theory systemd[1]: Started Restore /etc/resolv.conf if the system crashed before the ppp link was shut down.
May 2 20:31:38 theory systemd[1]: dbus.service: Main process exited, code=exited, status=1/FAILURE
May 2 20:31:38 theory systemd[1]: dbus.service: Unit entered failed state.
May 2 20:31:38 theory systemd[1]: dbus.service: Failed with result 'exit-code'.
May 2 20:31:38 theory systemd[1]: restorecond.service: Control process exited, code=exited status=1
May 2 20:31:38 theory systemd[1]: Failed to start Restorecon maintaining path file context.
May 2 20:31:38 theory systemd[1]: restorecond.service: Unit entered failed state.
May 2 20:31:38 theory systemd[1]: restorecond.service: Failed with result 'exit-code'.
May 2 20:31:38 theory systemd[1]: Started Permit User Sessions.
May 2 20:31:38 theory sensors[1255]: acpitz-virtual-0
May 2 20:31:38 theory sensors[1255]: Adapter: Virtual device
May 2 20:31:38 theory sensors[1255]: temp1: +51.0°C (crit = +200.0°C)
May 2 20:31:38 theory sensors[1255]: thinkpad-isa-0000
May 2 20:31:38 theory sensors[1255]: Adapter: ISA adapter
May 2 20:31:38 theory sensors[1255]: fan1: 1675 RPM
May 2 20:31:38 theory sensors[1255]: coretemp-isa-0000
May 2 20:31:38 theory sensors[1255]: Adapter: ISA adapter
May 2 20:31:38 theory sensors[1255]: Physical id 0: +52.0°C (high = +84.0°C, crit = +100.0°C)
May 2 20:31:38 theory sensors[1255]: Core 0: +52.0°C (high = +84.0°C, crit = +100.0°C)
May 2 20:31:38 theory sensors[1255]: Core 1: +50.0°C (high = +84.0°C, crit = +100.0°C)
May 2 20:31:38 theory sensors[1255]: Core 2: +49.0°C (high = +84.0°C, crit = +100.0°C)
May 2 20:31:38 theory sensors[1255]: Core 3: +50.0°C (high = +84.0°C, crit = +100.0°C)
May 2 20:31:38 theory systemd[1]: Started Initialize hardware monitoring sensors.
May 2 20:31:38 theory systemd[1]: Started System Logging Service.
May 2 20:31:38 theory bumblebeed[1240]: [ 32.356754] [INFO]/usr/sbin/bumblebeed 3.2.1 started
May 2 20:31:38 theory gdomap[1213]: GNUstep distributed object mapper disabled, see /etc/default/gdomap.
May 2 20:31:38 theory systemd[1]: Started LSB: Start the GNUstep distributed object mapper.
May 2 20:31:38 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:31:38 theory loadcpufreq[1227]: Loading cpufreq kernel modules...done (acpi-cpufreq).
May 2 20:31:39 theory systemd[1]: Started LSB: Load kernel modules needed to enable cpufreq scaling.
May 2 20:31:39 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:31:40 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:31:41 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:31:42 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:31:43 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:31:45 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:31:46 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:31:47 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:31:48 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:31:49 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:31:50 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:31:51 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:31:52 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:31:53 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:31:54 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:31:55 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:31:57 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:31:58 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:31:59 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:32:00 theory systemd[1]: Received SIGRTMIN+20 from PID 298 (plymouthd).
May 2 20:32:00 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:32:01 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:32:02 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:32:03 theory systemd[1]: systemd-logind.service: Main process exited, code=exited, status=1/FAILURE
May 2 20:32:03 theory systemd[1]: Failed to start Login Service.
May 2 20:32:03 theory systemd[1]: systemd-logind.service: Unit entered failed state.
May 2 20:32:03 theory systemd[1]: systemd-logind.service: Failed with result 'exit-code'.
May 2 20:32:03 theory systemd[1]: systemd-logind.service: Service has no hold-off time, scheduling restart.
May 2 20:32:03 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:32:05 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:32:06 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:32:07 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:32:08 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:32:09 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:32:10 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:32:11 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:32:12 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:32:13 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:32:15 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:32:16 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:32:17 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:32:18 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:32:19 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:32:20 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:32:21 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:32:22 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:32:23 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:32:24 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:32:25 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:32:26 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:32:28 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:32:29 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:32:30 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:32:31 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:32:32 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:32:33 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:32:35 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:32:36 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:32:37 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:32:38 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:32:39 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:32:40 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:32:42 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:32:43 theory systemd[1]: Looping too fast. Throttling execution a little.
May 2 20:32:44 theory systemd[1]: accounts-daemon.service: Start operation timed out. Terminating.
May 2 20:32:44 theory systemd[1]: thermald.service: Start operation timed out. Terminating.
May 2 20:32:44 theory systemd[1]: ModemManager.service: Start operation timed out. Terminating.
May 2 20:32:44 theory ModemManager[1176]: <info> Caught signal, shutting down...
May 2 20:32:44 theory ModemManager[1176]: <info> ModemManager is shut down
-- System Information:
Debian Release: stretch/sid
APT prefers testing
APT policy: (900, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.5.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages selinux-basics depends on:
ii checkpolicy 2.5-1
ii perl 5.22.1-10
ii policycoreutils 2.4-4
pn python3:any <none>
ii selinux-utils 2.5-2
Versions of packages selinux-basics recommends:
ii policycoreutils-python-utils 2.4-4
pn selinux-policy-default <none>
ii setools 3.3.8+20151215-3
Versions of packages selinux-basics suggests:
pn logcheck <none>
pn syslog-summary <none>
-- no debconf information
More information about the SELinux-devel
mailing list