#1142956 snapperd runs in initrc_t and D-Bus requests time out under SELinux Enforcing

#1142956#5
Date:
2026-07-28 17:51:21 UTC
From:
To:
Dear Maintainer,

On Debian 13 with SELinux in Enforcing mode, snapperd starts but runs
with the SELinux domain initrc_t.

D-Bus requests to snapperd then time out. At the same time, SELinux AVC
denials are recorded for D-Bus send_msg operations with the source
context:

    system_u:system_r:initrc_t:s0

Observed behaviour:

* snapperd.service starts successfully.
* busctl introspection of the Snapper D-Bus service times out.
* snapper.real list-configs times out when using D-Bus.
* snapper.real -c root list times out when using D-Bus.
* The equivalent commands succeed immediately with --no-dbus.
* SELinux is in Enforcing mode.
* snapperd is running in initrc_t rather than a dedicated Snapper domain.

The installed Snapper package was rebuilt locally from the Debian
source package with only one functional packaging change: