[Bug 1848777] Re: Systemd is missing a patch to allow it to be used with SELinux

Balint Reczey balint.reczey at canonical.com
Mon Oct 21 15:07:38 UTC 2019


The fix is present in v240 and later.

** Also affects: systemd (Ubuntu Bionic)
   Importance: Undecided
       Status: New

** Changed in: systemd (Ubuntu)
       Status: New => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to systemd in Ubuntu.
https://bugs.launchpad.net/bugs/1848777

Title:
  Systemd is missing a patch to allow it to be used with SELinux

Status in systemd package in Ubuntu:
  Fix Released
Status in systemd source package in Bionic:
  New

Bug description:
  Ubuntu Version:
  Description: Ubuntu 18.04.3 LTS
  Release: 18.04

  Systemd version:
  Installed: 273-ubuntu10.29
  Candidate: 273-ubuntu10.31

  Expected Behavior:
  Systemd will only remount the cgroups if they need to be relabeled.

  Actual Behavior:
  Systemd will try to re-mount the cgroups for relabeling which will fail and break systemd services that use cgroups.

  Upstream fix:
  https://github.com/systemd/systemd/pull/8595

  Additional Notes:
  I was able to work around this issue by applying the patch linked and changing the line:
  https://github.com/systemd/systemd/pull/8595/files#diff-9e1684efe63d10844b8dd6708fc60e8dR408
  To use the 237 version of fix label. E.G. (void) label_fix("/sys/fs/cgroup", true, true);
  While building the package from source.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1848777/+subscriptions



More information about the foundations-bugs mailing list