Bug 1041306

Summary: [abrt] firewall-applet-0.3.8-1.fc19: connection.py:651:call_blocking:DBusException: org.freedesktop.NetworkManager.Settings.PermissionDenied: uid 500 has no permission to perform this operation
Product: [Fedora] Fedora Reporter: Sergio Basto <sergio>
Component: firewalldAssignee: Thomas Woerner <twoerner>
Status: CLOSED CURRENTRELEASE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 19CC: jpopelka, sergio, twoerner
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/0140238701644c5666b5e6ffdb9d6fe74c6c18a1
Whiteboard: abrt_hash:cb0c5ec2aa598463b5871cea69d93d98fb00fc55
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-02-13 22:33:28 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Attachments:
Description Flags
File: backtrace
none
File: dso_list
none
File: environ none

Description Sergio Basto 2013-12-12 14:30:54 UTC
Description of problem:
just enable firewalld and firewall-applet, after that  I tried  change from trusted zone to internal zone. to test smb  browser in F19. but applet crash and don't change the zone, after that also, menu to change zone appears  in blank without options.

Version-Release number of selected component:
firewall-applet-0.3.8-1.fc19

Additional info:
reporter:       libreport-2.1.9
cmdline:        /usr/bin/python /usr/bin/firewall-applet
executable:     /usr/bin/firewall-applet
kernel:         3.11.10-200.fc19.x86_64
runlevel:       N 5
type:           Python
uid:            500

Truncated backtrace:
connection.py:651:call_blocking:DBusException: org.freedesktop.NetworkManager.Settings.PermissionDenied: uid 500 has no permission to perform this operation

Traceback (most recent call last):
  File "/usr/bin/firewall-applet", line 759, in change_zone_connection_editor
    editor.run()
  File "/usr/bin/firewall-applet", line 170, in run
    settings = connection_obj.GetSettings()
  File "/usr/lib/python2.7/site-packages/dbus/proxies.py", line 70, in __call__
    return self._proxy_method(*args, **keywords)
  File "/usr/lib/python2.7/site-packages/slip/dbus/proxies.py", line 50, in __call__
    return dbus.proxies._ProxyMethod.__call__(self, *args, **kwargs)
  File "/usr/lib/python2.7/site-packages/dbus/proxies.py", line 145, in __call__
    **keywords)
  File "/usr/lib/python2.7/site-packages/dbus/connection.py", line 651, in call_blocking
    message, timeout)
DBusException: org.freedesktop.NetworkManager.Settings.PermissionDenied: uid 500 has no permission to perform this operation

Local variables in innermost frame:
byte_arrays: False
self: <dbus._dbus.SystemBus (system) at 0x1733b30>
args: ()
object_path: '/org/freedesktop/NetworkManager/Settings/10'
signature: None
bus_name: dbus.UTF8String(':1.6')
get_args_opts: {'byte_arrays': False, 'utf8_strings': False}
timeout: 2147483.647
kwargs: {}
dbus_interface: None
message: <dbus.lowlevel.MethodCallMessage path: /org/freedesktop/NetworkManager/Settings/10, iface: n/a, member: GetSettings dest: :1.6>
method: 'GetSettings'

Comment 1 Sergio Basto 2013-12-12 14:31:02 UTC
Created attachment 835832 [details]
File: backtrace

Comment 2 Sergio Basto 2013-12-12 14:31:04 UTC
Created attachment 835833 [details]
File: dso_list

Comment 3 Sergio Basto 2013-12-12 14:31:06 UTC
Created attachment 835834 [details]
File: environ

Comment 4 Thomas Woerner 2014-02-11 15:41:56 UTC
Please verify NetworkManager and firewalld permissions and settings. Have you had SELinux AVC messages also?

Comment 5 Sergio Basto 2014-02-11 16:26:54 UTC
meanwhile I upgrade laptop to F20 , on F20 applet don't crash , but also doesn't work . 
Selinux disable 

Feb 11 16:19:24 segulix systemd: Starting firewalld - dynamic firewall daemon...
Feb 11 16:19:28 segulix systemd: Started firewalld - dynamic firewall daemon.
Feb 11 16:19:29 segulix NetworkManager[686]: nm_connection_get_setting_connection: assertion 'NM_IS_CONNECTION (connection)' failed
Feb 11 16:19:30 segulix NetworkManager[686]: nm_connection_get_setting_connection: assertion 'NM_IS_CONNECTION (connection)' failed
Feb 11 16:19:30 segulix NetworkManager[686]: nm_connection_get_setting_connection: assertion 'NM_IS_CONNECTION (connection)' failed
Feb 11 16:19:32 segulix firewalld: 2014-02-11 16:19:31 ERROR: '/sbin/iptables -I POST_public 2 -t nat -j POST_public_deny' failed: iptables: Resource temporarily unavailable.
Feb 11 16:19:33 segulix firewalld: 2014-02-11 16:19:31 ERROR: '/sbin/iptables -X POST_public -t nat' failed: iptables: Directory not empty.
Feb 11 16:19:33 segulix firewalld: 2014-02-11 16:19:31 ERROR: '/sbin/iptables -D POST_public 1 -t nat -j POST_public_log' failed: iptables v1.4.19.1: Illegal option `-j' with this command

Try `iptables -h' or 'iptables --help' for more information.
Feb 11 16:19:33 segulix firewalld: 2014-02-11 16:19:31 ERROR: COMMAND_FAILED: '/sbin/iptables -I POST_public 2 -t nat -j POST_public_deny' failed: iptables: Resource temporarily unavailable.
Feb 11 16:20:01 segulix systemd: Starting Session 345 of user root.
Feb 11 16:20:01 segulix systemd: Started Session 345 of user root.
Feb 11 16:20:10 segulix NetworkManager[686]: ifcfg-rh: updating /etc/sysconfig/network-scripts/ifcfg-eth0
Feb 11 16:20:10 segulix firewalld: 2014-02-11 16:20:10 ERROR: '/sbin/iptables -N POST_public -t nat' failed: iptables: Chain already exists.
Feb 11 16:20:10 segulix firewalld: 2014-02-11 16:20:10 ERROR: COMMAND_FAILED: '/sbin/iptables -N POST_public -t nat' failed: iptables: Chain already exists.
Feb 11 16:20:10 segulix NetworkManager[686]: <warn> (eth0) firewall zone add/change failed: (32) COMMAND_FAILED: '/sbin/iptables -N POST_public -t nat' failed: iptables: Chain already exists.
Feb 11 16:21:22 segulix NetworkManager[686]: ifcfg-rh: updating /etc/sysconfig/network-scripts/ifcfg-eth0
Feb 11 16:21:22 segulix firewalld: 2014-02-11 16:21:22 ERROR: '/sbin/iptables -N POST_public -t nat' failed: iptables: Chain already exists.
Feb 11 16:21:22 segulix firewalld: 2014-02-11 16:21:22 ERROR: COMMAND_FAILED: '/sbin/iptables -N POST_public -t nat' failed: iptables: Chain already exists.
Feb 11 16:21:22 segulix NetworkManager[686]: <warn> (eth0) firewall zone add/change failed: (32) COMMAND_FAILED: '/sbin/iptables -N POST_public -t nat' failed: iptables: Chain already exists.
Feb 11 16:21:58 segulix NetworkManager[686]: ifcfg-rh: updating /etc/sysconfig/network-scripts/ifcfg-eth0
Feb 11 16:21:58 segulix firewalld: 2014-02-11 16:21:58 ERROR: '/sbin/iptables -N POST_public -t nat' failed: iptables: Chain already exists.
Feb 11 16:21:58 segulix firewalld: 2014-02-11 16:21:58 ERROR: COMMAND_FAILED: '/sbin/iptables -N POST_public -t nat' failed: iptables: Chain already exists.
Feb 11 16:21:59 segulix NetworkManager[686]: <warn> (eth0) firewall zone add/change failed: (32) COMMAND_FAILED: '/sbin/iptables -N POST_public -t nat' failed: iptables: Chain already exists.

Comment 6 Thomas Woerner 2014-02-11 18:54:43 UTC
Please add the output of

rpm -qa "firewall*"
rpm -qa "NetworkManager*"

And also 

rpm -Va "firewall*"
rpm -Va "NetworkManager*"

Comment 7 Sergio Basto 2014-02-12 02:20:35 UTC
root@segulix:/var/www/html#rpm -Va `cat /var/log/rpmpkgs| grep -P "firewall|NetworkManager" `
root@segulix:/var/www/html#cat /var/log/rpmpkgs| grep -P "firewall|NetworkManager"
firewall-applet-0.3.9.2-1.fc20.noarch
firewall-config-0.3.9.2-1.fc20.noarch
firewalld-0.3.9.2-1.fc20.noarch
NetworkManager-0.9.9.0-28.git20131003.fc20.x86_64
NetworkManager-glib-0.9.9.0-28.git20131003.fc20.i686
NetworkManager-glib-0.9.9.0-28.git20131003.fc20.x86_64
NetworkManager-openconnect-0.9.8.0-2.fc20.x86_64
NetworkManager-openswan-0.9.8.0-1.fc20.x86_64
NetworkManager-openvpn-0.9.9.0-0.1.git20140128.fc20.x86_64
NetworkManager-openvpn-gnome-0.9.9.0-0.1.git20140128.fc20.x86_64
NetworkManager-pptp-0.9.8.2-3.fc20.x86_64
NetworkManager-pptp-gnome-0.9.8.2-3.fc20.x86_64
NetworkManager-vpnc-0.9.8.2-2.fc20.x86_64
NetworkManager-vpnc-gnome-0.9.8.2-2.fc20.x86_64
system-config-firewall-1.2.29-10.fc20.noarch
system-config-firewall-base-1.2.29-10.fc20.noarch
system-config-firewall-tui-1.2.29-10.fc20.noarch
yum-NetworkManager-dispatcher-1.1.31-20.fc20.noarch


rpm -Va 
no output

Comment 8 Sergio Basto 2014-02-13 22:33:28 UTC
/etc/cron.daily/rpm  
cat /var/log/rpmpkgs| grep -P "firewall"
firewall-applet-0.3.9.3-1.fc20.noarch
firewall-config-0.3.9.3-1.fc20.noarch
firewalld-0.3.9.3-1.fc20.noarch
system-config-firewall-1.2.29-10.fc20.noarch
system-config-firewall-base-1.2.29-10.fc20.noarch
system-config-firewall-tui-1.2.29-10.fc20.noarch


with this versions seems that firewall-applet is working correctly 

Thanks,