{"action":"created","issue":{"url":"https://api.github.com/repos/coreos/bugs/issues/1258","repository_url":"https://api.github.com/repos/coreos/bugs","labels_url":"https://api.github.com/repos/coreos/bugs/issues/1258/labels{/name}","comments_url":"https://api.github.com/repos/coreos/bugs/issues/1258/comments","events_url":"https://api.github.com/repos/coreos/bugs/issues/1258/events","html_url":"https://github.com/coreos/bugs/issues/1258","id":151925983,"number":1258,"title":"CoreOS stable (899.15.0) polkit segfault using selinux","user":{"login":"TheTechNick","id":7278896,"avatar_url":"https://avatars.githubusercontent.com/u/7278896?v=3","gravatar_id":"","url":"https://api.github.com/users/TheTechNick","html_url":"https://github.com/TheTechNick","followers_url":"https://api.github.com/users/TheTechNick/followers","following_url":"https://api.github.com/users/TheTechNick/following{/other_user}","gists_url":"https://api.github.com/users/TheTechNick/gists{/gist_id}","starred_url":"https://api.github.com/users/TheTechNick/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/TheTechNick/subscriptions","organizations_url":"https://api.github.com/users/TheTechNick/orgs","repos_url":"https://api.github.com/users/TheTechNick/repos","events_url":"https://api.github.com/users/TheTechNick/events{/privacy}","received_events_url":"https://api.github.com/users/TheTechNick/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/coreos/bugs/labels/area/usability","name":"area/usability","color":"bfe5bf"},{"url":"https://api.github.com/repos/coreos/bugs/labels/component/selinux","name":"component/selinux","color":"0052cc"},{"url":"https://api.github.com/repos/coreos/bugs/labels/component/systemd","name":"component/systemd","color":"0052cc"},{"url":"https://api.github.com/repos/coreos/bugs/labels/kind/bug","name":"kind/bug","color":"FF0000"},{"url":"https://api.github.com/repos/coreos/bugs/labels/priority/P0","name":"priority/P0","color":"DF0101"},{"url":"https://api.github.com/repos/coreos/bugs/labels/team/os","name":"team/os","color":"ffffff"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":8,"created_at":"2016-04-29T17:17:47Z","updated_at":"2016-05-06T11:11:03Z","closed_at":null,"body":"I wanted to setup a selinux secured coreos cluster, but after setting the selinux mode to \"enforcing\" and restarting the machine, every call to systemd results in polkitd segfaulting.\r\n\r\nTo enable selinux enforcing I followed the steps here:\r\nhttps://coreos.com/os/docs/latest/selinux.html\r\n\r\nFirst I thought, that this might be an issue on my baremetal installation, but I can reproduce this behavior on plain CoreOS stable (899.15.0) installations on VirtualBox, digitalocean and baremetal.\r\n\r\nThe selinux integration is a critical requirement for my setup, so any help is very welcome.\r\n\r\nExample Output (digitalocean):\r\n```\r\ncore@coreos-512mb-fra1-01 ~ $ systemctl restart etcd2\r\nError getting authority: Error initializing authority: Error calling StartServiceByName for org.freedesktop.PolicyKit1: Timeout was reached (g-io-error-quark, 24)\r\nCould not watch jobs: Connection timed out\r\n\r\ncore@coreos-512mb-fra1-01 ~ $ systemctl status polkit -l\r\n● polkit.service - Authorization Manager\r\n   Loaded: loaded (/usr/lib64/systemd/system/polkit.service; static; vendor preset: disabled)\r\n   Active: failed (Result: signal) since Fri 2016-04-29 16:58:26 UTC; 1min 43s ago\r\n     Docs: man:polkit(8)\r\n  Process: 985 ExecStart=/usr/lib/polkit-1/polkitd --no-debug (code=killed, signal=SEGV)\r\n Main PID: 985 (code=killed, signal=SEGV)\r\n\r\nApr 29 16:58:26 coreos-512mb-fra1-01 systemd[1]: Starting Authorization Manager...\r\nApr 29 16:58:26 coreos-512mb-fra1-01 polkitd[985]: Started polkitd version 0.113\r\nApr 29 16:58:26 coreos-512mb-fra1-01 systemd[1]: polkit.service: Main process exited, code=killed, status=11/SEGV\r\nApr 29 16:58:26 coreos-512mb-fra1-01 systemd[1]: Failed to start Authorization Manager.\r\nApr 29 16:58:26 coreos-512mb-fra1-01 systemd[1]: polkit.service: Unit entered failed state.\r\nApr 29 16:58:26 coreos-512mb-fra1-01 systemd[1]: polkit.service: Failed with result 'signal'.\r\n```"},"comment":{"url":"https://api.github.com/repos/coreos/bugs/issues/comments/217413148","html_url":"https://github.com/coreos/bugs/issues/1258#issuecomment-217413148","issue_url":"https://api.github.com/repos/coreos/bugs/issues/1258","id":217413148,"user":{"login":"TheTechNick","id":7278896,"avatar_url":"https://avatars.githubusercontent.com/u/7278896?v=3","gravatar_id":"","url":"https://api.github.com/users/TheTechNick","html_url":"https://github.com/TheTechNick","followers_url":"https://api.github.com/users/TheTechNick/followers","following_url":"https://api.github.com/users/TheTechNick/following{/other_user}","gists_url":"https://api.github.com/users/TheTechNick/gists{/gist_id}","starred_url":"https://api.github.com/users/TheTechNick/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/TheTechNick/subscriptions","organizations_url":"https://api.github.com/users/TheTechNick/orgs","repos_url":"https://api.github.com/users/TheTechNick/repos","events_url":"https://api.github.com/users/TheTechNick/events{/privacy}","received_events_url":"https://api.github.com/users/TheTechNick/received_events","type":"User","site_admin":false},"created_at":"2016-05-06T11:11:03Z","updated_at":"2016-05-06T11:11:03Z","body":"Thanks for your workaround!\r\nThis issue is related to missing selinux permissions: #1270"}}