Control: tag -1 - moreinfo Control: retitle -1 Default configuration is incompatible with a non-SELinux active LSM Control: severity -1 important
Anthony DeRobertis: > Seems your hypothesis is correct. > [...] > I then went ahead and edited cachefilesd.conf and commented out the > secctx line. After that, cachefilesd started successfully. Thanks for the quick turnaround! Dear cachefilesd maintainers, see my previous message for the course of action I recommend: AppArmor is much more used on Debian than SELinux and will likely be enabled by default on Buster, so shipping a default configuration that breaks when a non-SELinux LSM is enabled will provide a pretty bad user experience (and will likely become RC at some point). Cheers, -- intrigeri
