<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
On Mon, 02 May 2016 20:51:55 -0700 Jonathan Yu <a
class="moz-txt-link-rfc2396E" href="mailto:jawnsy@cpan.org"><a class="moz-txt-link-rfc2396E" href="mailto:jawnsy@cpan.org"><jawnsy@cpan.org></a></a>
wrote:<br>
><br>
> Dear Maintainer,<br>
<br>
Hello,<br>
<br>
> <br>
> Thank you for your work bringing SELinux to Debian!<br>
> <br>
> I regret that my knowledge of both SELinux and systemd is
limited, so I do not<br>
> know what diagnostics to collect or how to collect it. That
said, I can<br>
> reproduce this problem at will, and I'm happy to collect
whatever diagnostics<br>
> you need.<br>
> <br>
> * What led up to the situation?<br>
> <br>
> I upgraded my system doing full-upgrade. My system is mainly
'testing' with<br>
> some packages coming from 'unstable' (I tried updating to the
newer<br>
> selinux-utils in unstable, but to no avail).<br>
> <br>
> Unfortunately there are not much diagnostics provided during
boot, and I<br>
> could not find any trace of the failed boots in journalctl or
in files<br>
> in /var/log, presumably because the problems occurred at such
an early<br>
> stage of boot. I checked /var/log/syslog, but did not find much
informative.<br>
> <br>
> * What exactly did you do (or not do) that was effective (or<br>
> ineffective)?<br>
> * What was the outcome of this action?<br>
> <br>
> Removing the "selinux=1 security=selinux" flags from grub
allowed me to boot.<br>
> I then used "selinux-activate disabled" to disable SELinux
while we sort<br>
> these issues out.<br>
> <br>
> I also tried running "selinux-activate disabled" and
re-activating it again,<br>
> as it seems to do something with restorecond on first boot
after activation.<br>
> Unfortunately this did not change anything :(<br>
> <br>
> * What outcome did you expect instead?<br>
> <br>
> I expected that my system could continue booting. I've never
had significant<br>
> issues with Debian upgrades (thanks to careful maintainers like
you :) and<br>
> guess that there must be something strange about the way my
system is<br>
> configured.<br>
><br>
> [...] <br>
> May 2 20:31:38 theory dbus-daemon[1183]: Failed to start
message bus: Failed to open
"/etc/selinux/default/contexts/dbus_contexts": No such file or
directory<br>
> [<font size="+1">...</font>]<br>
> pn selinux-policy-default <none><br>
<br>
Do you have a policy installed on your machine?<br>
<br>
The policy package currently in unstable is not compatible with the
new userspace and needs to be adjusted, see bug #805492.<br>
<br>
I've unfortunately not a lot of time for this. That means that if
you want to use SELinux in debian, you'll have to compile/build your
own policy.<br>
</body>
</html>