Hello! Some more thoughts to this problem:
@Russel: I think you are right: these AVCs are logged, but (maybe) do not influence the system. In one of my earlier mails to this problem, I reported, that this was not reproducible on Jessie. This is correct - as long as SYSV-init is used. Today I installed systemd on Jessie and run into exactly this problem. Also here always the '/sys/class/net/eth0/operstate' is 'down'. One observation (which might have nothing to do with this problem): When using Jessie with SYSV-init, it takes quiet a long time to boot. Most of the time is spend in: 'Waiting for /dev to be fully populated': 30sec Using systemd the whole booting takes about 2sec. When disabling SELinux (setting to permissive), the problem vanishes. Here the 'operstate' is 'up' - and the network device is initialized. I do not see any logged AVC either in permissive nor in enforcing mode. And I'm not sure if this is a really problem of selinux-policy-default or some other package. All tests were done on a minimal installation of Debian in a VM. The host system is Debian Jessie running KVM 2.0.0+dfsg-6+b1. If you want, I can provide the VM where this problem occurs every boot. Kind regards Andre root@debselinux01:~# dpkg -l | grep selinux ii libselinux1:amd64 2.3-1 amd64 SELinux runtime shared libraries ii python-selinux 2.3-1 amd64 Python bindings to SELinux shared libraries ii selinux-basics 0.5.2 all SELinux basic support ii selinux-policy-default 2:2.20140421-4 all Strict and Targeted variants of the SELinux policy ii selinux-utils 2.3-1 amd64 SELinux utility programs root@debselinux01:~# dpkg -l | grep systemd ii libpam-systemd:amd64 208-6 amd64 system and service manager - PAM module ii libsystemd-daemon0:amd64 208-6 amd64 systemd utility library ii libsystemd-journal0:amd64 208-6 amd64 systemd journal utility library ii libsystemd-login0:amd64 208-6 amd64 systemd login utility library ii systemd 208-6 amd64 system and service manager ii systemd-sysv 208-6 amd64 system and service manager - SysV links -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
