Oh, and the fact that gdm is off is a red herring here - we temporarily disable it during the failsafe mode since otherwise it tries to handle the failure itself by displaying the text-mode "failed to configure X" message. Normally bulletproof-x then restarts gdm, but when the user clicks shutdown it sounds like the code to restart gdm isn't invoked.
Oh, and the fact that gdm is off is a red herring here - we temporarily disable it during the failsafe mode since otherwise it tries to handle the failure itself by displaying the text-mode "failed to configure X" message. Normally bulletproof-x then restarts gdm, but when the user clicks shutdown it sounds like the code to restart gdm isn't invoked.