[DSE-Dev] Bug#875546: selinux-policy-default: This package can't compile correctly on Unstable, need better build-depends

[Russell Coker]

Package: selinux-policy-default
Version: 2:2.20161023.1-9
Severity: normal

libsemanage.semanage_pipe_data: Child process /usr/lib/selinux/hll/pp failed with code: 255. (No such file or directory).
accountsd: libsepol.policydb_read: policydb module version 19 does not match my version range 4-17
accountsd: libsepol.sepol_module_package_read: invalid module in module package (at section 0)
accountsd: Failed to read policy package
libsemanage.semanage_direct_commit: Failed to compile hll files into cil files.
 (No such file or directory).
semodule:  Failed!
 failed.

If this package is compiled on Unstable the binary will not be usable on
Stretch and gives the above errors at install time.  This needs build-depends
on 2.6 versions of checkpolicy, libsepol1, policycoreutils, and
policycoreutils-python-utils.

As a general rule those packages only have version increaments upstream if such
problems are likely.  So in future we should always depend on a particular
upstream version.  Any time the policy will work with a new upstream version
of the toolchain we can just upload a new version.

-- System Information:
Debian Release: 9.1
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-3-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), LANGUAGE=en_AU:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages selinux-policy-default depends on:
ii  libselinux1      2.6-3+b1
ii  libsemanage1     2.6-2
ii  libsepol1        2.6-2
ii  policycoreutils  2.6-3
ii  selinux-utils    2.6-3+b1

Versions of packages selinux-policy-default recommends:
ii  checkpolicy  2.6-2
ii  setools      4.0.1-6

Versions of packages selinux-policy-default suggests:
pn  logcheck        <none>
pn  syslog-summary  <none>

-- Configuration Files:
/etc/selinux/default/modules/active/file_contexts.local changed [not included]

-- no debconf information