[DSE-Dev] Bug#879037: refpolicy: SELinux prevents systemctl from listing units durring tab completion.

[Joe B. McEntire]

Package: refpolicy
Version: selinux-policy-default
Severity: normal

Dear Maintainer,

*** Reporter, please consider answering these questions, where appropriate ***

   * What led up to the situation?  Installed selinux on Debian Stretch

   * What exactly did you do (or not do) that was effective (or
     ineffective)?  Typed systemctl restart anyservice.service and
attempted to tab complete the name.  This breaks with and access denied.
putting selinux in permissive mode allows tab completion to function
properly.  

command example:
sudo systemctl status networFailed to list unit files: Connection timed
out
Failed to list units: Connection timed out

audit2allow does not seem to help.

   * What was the outcome of this action?Failure

   * What outcome did you expect instead?Working tab completion

*** End of the template - remove these template lines ***


-- System Information:
Debian Release: 9.2
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.9.0-4-amd64 (SMP w/24 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE= (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)