SELinux cannot be installed on EFI systems

Bug #1047099 reported by Paul Donohue
26
This bug affects 5 people
Affects Status Importance Assigned to Milestone
selinux (Ubuntu)
Triaged
Medium
Unassigned

Bug Description

The 'selinux' package pre-depends on grub-pc. It therefore cannot be installed on EFI systems requiring grub-efi instead of grub-pc.

Revision history for this message
Paul Donohue (s-launchpad-paulsd-com) wrote :

Incase anyone else runs into this and needs a work-around, here's how to build a custom package without the dependency:
mkdir tmp ; cd tmp/
apt-get -t precise source selinux
sudo apt-get install debhelper cdbs
cd selinux-0.11/
Edit debian/control : Delete the Pre-Depends line and remove grub-pc from the Depends line
Edit debian/changelog : Add '-1' to the version number in the first line
fakeroot debian/rules binary
cd ..
sudo dpkg --force-depends -i selinux_0.11-1_all.deb
sudo apt-get -f --no-install-recommends install
sudo apt-get install selinux-policy-ubuntu

Revision history for this message
Dave Gilbert (ubuntu-treblig) wrote :

Medium: selinux doesn't actually look like it's core on Ubuntu, so severe impact on non-core
Triaged: Bug explains exactly what the dependency problem is
(wth does it depend on grub-pc anyway?)

Changed in selinux (Ubuntu):
importance: Undecided → Medium
status: New → Triaged
Revision history for this message
Paul Donohue (s-launchpad-paulsd-com) wrote :

I assume it depends on grub-pc because the selinux package modifies /etc/default/grub to enable selinux at boot time.

I think it should instead depend on grub2-common, which is the package that actually owns /etc/default/grub

Revision history for this message
Colby Combs (clcombs) wrote :

7 years and this was never resolved? Not that Ubuntu boots for me without selinux=0 but I sort of had a heart attack when it removed grub-EFI in favor of grub-pc on my UEFI only mode machine

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.