Moin

selinux-policy-default fails to install into a basic Debian unstable
system:

Setting up selinux-policy-default (2:2.20220520-1) ...
Updating selinux default policy (this step might take a moment)...libsemanage.semanage_pipe_data: Child process /usr/libexec/selinux/hll/pp failed with code: 255. (No such file or directory).
xserver: libsepol.validate_user_datum: Invalid user datum
xserver: libsepol.validate_datum_array_entries: Invalid datum array entries
xserver: libsepol.validate_policydb: Invalid policydb
xserver: libsepol.sepol_module_package_read: invalid module in module package (at section 0)
xserver: Failed to read policy package
libsemanage.semanage_direct_commit: Failed to compile hll files into cil files.
 (No such file or directory).
semodule:  Failed!
 failed.
dpkg: error processing package selinux-policy-default (--configure):
 installed selinux-policy-default package post-installation script subprocess returned error exit status 1
Processing triggers for man-db (2.10.2-1) ...
Errors were encountered while processing:
 selinux-policy-default
E: Sub-process /usr/bin/dpkg returned an error code (1)

Bastian

control: reassign -1 libsepol2 3.4-1

Proposed fix: https://patchwork.kernel.org/project/selinux/patch/20220607150145.29757-1-cgzones@googlemail.com/

We believe that the bug you reported is fixed in the latest version of
libsepol, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1012503@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Laurent Bigonville <bigon@debian.org> (supplier of updated libsepol package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Wed, 15 Jun 2022 09:56:48 +0200
Source: libsepol
Architecture: source
Version: 3.4-2
Distribution: unstable
Urgency: medium
Maintainer: Debian SELinux maintainers <selinux-devel@lists.alioth.debian.org>
Changed-By: Laurent Bigonville <bigon@debian.org>
Closes: 1012503
Changes:
 libsepol (3.4-2) unstable; urgency=medium
 .
   * fix validation of user declarations in modules, patch proposed upstream
     (Closes: #1012503)
Checksums-Sha1:
 fdd160674f9fa75b1e207e16dac9fc3123859bed 2005 libsepol_3.4-2.dsc
 bb9e670b1a715cdb9307e72c4ecd71ead6d7cce2 21516 libsepol_3.4-2.debian.tar.xz
 d9e5221433044d8a66ab43d89acea82b4fa18021 5196 libsepol_3.4-2_source.buildinfo
Checksums-Sha256:
 c43db54870c37a4b6441b1980bfd41932e7851244ba1fda0df86c5f17dd67e8a 2005 libsepol_3.4-2.dsc
 fdf943b513b8d0fc6b74fd6a007ba35c9601909c0b3fd6e7726b4b09b1243502 21516 libsepol_3.4-2.debian.tar.xz
 5d04fb8bd13cc66dd9c5ff6b55fb5c1c218aef0d9bb21e1b98d052f4af75708d 5196 libsepol_3.4-2_source.buildinfo
Files:
 d6f2258610e38e4450ee1ba7de8997cd 2005 libs optional libsepol_3.4-2.dsc
 90e632604a820904f0e21ae5ff5d07ac 21516 libs optional libsepol_3.4-2.debian.tar.xz
 59faba066692439142ed7de8f31d304a 5196 libs optional libsepol_3.4-2_source.buildinfo
-----BEGIN PGP SIGNATURE-----

iQFFBAEBCAAvFiEEmRrdqQAhuF2x31DwH8WJHrqwQ9UFAmKpkN0RHGJpZ29uQGRl
Ymlhbi5vcmcACgkQH8WJHrqwQ9X82ggApQCaz1KNNIFTdGgjt6gL8Rx+GH3aqx+X
T9fXPRbJbqEhyjRCmevQBlAhwsXEbeFzESXTbKCo7A2WxzPV70OHKyG3N8NxIabd
sPcOFDV5hlOkkUdXJ4bYdOo+G+QLh42czq3E/NvJnXE62vrhn08TabW3BeEB6IHL
fgfdDRtQbrLm8SM2dejb8Wm2fgXeeGdsoIwrDfRm6zBI+jHcWFC+uhN94a+At3Dv
gON0+NUj9l6IzGKCYtDJIB/8+xJzqFYmNOVhPXRb1coP9NGH7SI1exOhfyZi2e/0
gBFt7UZvGkvzdJBN0ni0JJOQcLB9vdcI/i6V0bSHe5nju7JWM0nhaw==
=ddwm
-----END PGP SIGNATURE-----