commit d1769a9b8309ec47a938a561648a1f8fff1b9627
author Stephen Smalley <sds@tycho.nsa.gov> Fri Jun 09 10:12:32 2017 -0400
committer Stephen Smalley <sds@tycho.nsa.gov> Fri Jun 09 10:31:48 2017 -0400
tree 0d7abcf90a0cb0f8840c5d8d9913fb2eacb2d862
parent f9ae34a40440d194b60fbd1ce570b8b094f1a94d

libselinux: always unmount selinuxfs for SELINUX=disabled

As reported in:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=864479
using a kernel configuration with CONFIG_SECURITY_SELINUX_DISABLE=n
and a /etc/selinux/config with SELINUX=disabled leads to a boot
failure.

Fix this by always unmounting selinuxfs if /etc/selinux/config has
SELINUX=disabled even if unable to successfully disable SELinux.
This will ensure that subsequent is_selinux_enabled() tests will
return 0 (disabled) and userspace will therefore skip any SELinux
processing.

Reported-by: Christian Göttsche <cgzones@googlemail.com>
Reported-by: Laurent Bigonville <bigon@debian.org>
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>