> We don't support SELinux in Ubuntu (only AppArmor),

That sounds more than strange:
There are many hints, that Ubuntu (also) supports SELinux [1] [2].

I'm not sure how you work together with the people of AppArmor or SELinux:
typically the application developers / maintainers should discuss the MAC rules 
with the maintainers of the appropriate MAC implementation (because those are 
the people who should know what the application should be allowed to). 
Therefore my idea was, that you tell those people: my application needs those 
rules , please implement them.

One thing I could imagine (after reading your answer) is, that this bug
might be related to the selinux-policy-default package?

I'm somewhat convinced, that the problem is Ubuntu-related: the appropriate 
policy packages were especially created for Debian / Ubuntu - this has nothing 
to do with the upstream systemd (therefore I see no sense in reporting this 
there).
(I have a running Debian Jessie using systemd with SELinux set to enforcing for 
a year now - without these problems.)

Would it be possible that you discuss this with the SELinux-Ubuntu
people, how to handle such kind of problem?


[1] https://wiki.ubuntu.com/Security/Features
[2] 
http://packages.ubuntu.com/search?keywords=selinux&searchon=names&suite=xenial&section=all

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1563354

Title:
  systemd-tmpfiles-setup.service fails after switching SELinux to
  enforcing

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1563354/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to