Bug 1160508
| Summary: | SELinux is preventing ibus-x11 from 'connectto' accesses on the unix_stream_socket @/tmp/dbus-23MRaeN85Y. | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Leslie Satenstein <lsatenstein> |
| Component: | ibus | Assignee: | fujiwara <tfujiwar> |
| Status: | CLOSED WORKSFORME | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 21 | CC: | alain.carcel, alena.shupakova, alex, antonio.montagnani, dominick.grift, dwalsh, elparaguajo, HolyMaster, i18n-bugs, khan.braj, kpratik217, KristinicaKnezevic, la_super_tomate, lsatenstein, lvrabec, mgrepl, plautrba, ritaccoluigi, roboticbunny1, rub21quin-21, sanya2086, sep0425, shawn.p.huang, smitna, tfujiwar |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | x86_64 | ||
| OS: | Unspecified | ||
| Whiteboard: | abrt_hash:0b3e1dd4fca75cb3d20173068ce02d568018b5513327ff637de8752544d54551 | ||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2015-03-10 04:17:14 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
Hi, What is ibus-x11 ? What is iBus? From what I can tell it’s an input framework that is probably some way of enabling easier non-english language input… Not sure though. It’s a replacement candidate for SCIM, an input method primarily for Chinese, Korean, Japanese, … language users. Description of problem: It happened after startup Version-Release number of selected component: selinux-policy-3.13.1-99.fc21.noarch Additional info: reporter: libreport-2.3.0 hashmarkername: setroubleshoot kernel: 3.17.4-301.fc21.x86_64 type: libreport Description of problem: Forse dopo che ho installato delle applicazioni con yum.Ancora adesso quando uso yum mi restituisce degli errori.Oppure forse dopo che ho fatto degli aggiornamenti.Spero di esservi stato utile. Version-Release number of selected component: selinux-policy-3.13.1-105.3.fc21.noarch Additional info: reporter: libreport-2.3.0 hashmarkername: setroubleshoot kernel: 3.18.7-200.fc21.x86_64 type: libreport Adding guys from ibus. Does anyone know what's going on here? I don't see that error message. % grep ibus-x11 /var/log/audit/audit.log | audit2allow -M mypol Nothing to do grep ibus-x11 /var/log/audit/audit.log type=ANOM_ABEND msg=audit(1409822020.237:4450): auid=1000 uid=1000 gid=1000 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=32551 comm="ibus-x11" exe="/usr/libexec/ibus-x11" sig=11 type=ANOM_ABEND msg=audit(1409828082.718:4477): auid=1000 uid=1000 gid=1000 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=2250 comm="ibus-x11" exe="/usr/libexec/ibus-x11" sig=11 type=ANOM_ABEND msg=audit(1409837629.930:4658): auid=1000 uid=1000 gid=1000 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=3440 comm="ibus-x11" exe="/usr/libexec/ibus-x11" sig=11 type=ANOM_ABEND msg=audit(1409849878.478:4836): auid=1000 uid=1000 gid=1000 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=6270 comm="ibus-x11" exe="/usr/libexec/ibus-x11" sig=11 ibus-x11 itself does not touch /tmp/dbus-*. How can I reproduce your problem? ibus-x11 is launched by ibus-daemon. % ibus-daemon --xim --verbose Description of problem:
SELinux is preventing ibus-x11 from connectto access on the unix_stream_socket @/tmp/dbus-yRdCVlRZBD.
***** Plugin catchall (100. confidence) suggests **************************
If you believe that ibus-x11 should be allowed connectto access on the dbus-yRdCVlRZBD unix_stream_socket by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# grep ibus-x11 /var/log/audit/audit.log | audit2allow -M mypol
# semodule -i mypol.pp
Additional Information:
Source Context system_u:system_r:xdm_t:s0-s0:c0.c1023
Target Context unconfined_u:unconfined_r:unconfined_dbusd_t:s0-s0
:c0.c1023
Target Objects @/tmp/dbus-yRdCVlRZBD [ unix_stream_socket ]
Source ibus-x11
Source Path ibus-x11
Port <Unknown>
Host (removed)
Source RPM Packages
Target RPM Packages
Policy RPM selinux-policy-3.13.1-105.3.fc21.noarch
Selinux Enabled True
Policy Type targeted
Enforcing Mode Enforcing
Host Name (removed)
Platform Linux localhost.localdomain 3.18.7-200.fc21.i686
#1 SMP Wed Feb 11 22:26:31 UTC 2015 i686 i686
Alert Count 2
First Seen 2015-02-28 23:18:42 AEDT
Last Seen 2015-03-01 22:06:01 AEDT
Local ID b7073ac5-dde9-483f-ae94-2b8239c92b74
Raw Audit Messages
type=AVC msg=audit(1425207961.743:454): avc: denied { connectto } for pid=1824 comm="ibus-x11" path=002F746D702F646275732D79526443566C525A4244 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_dbusd_t:s0-s0:c0.c1023 tclass=unix_stream_socket permissive=0
Hash: ibus-x11,xdm_t,unconfined_dbusd_t,unix_stream_socket,connectto
Version-Release number of selected component:
selinux-policy-3.13.1-105.3.fc21.noarch
Additional info:
reporter: libreport-2.3.0
hashmarkername: setroubleshoot
kernel: 3.18.7-200.fc21.i686
type: libreport
I don't understand the suggested fix. Is it an ibus-x11 issue? Please close, is fixed for Fedora22 Is there a problem for F21? There may be. But a fix is to manually redo localectl set-keymap to include pc105 in the settings. I would say, deferred Description of problem: just started Version-Release number of selected component: selinux-policy-3.13.1-105.9.fc21.noarch Additional info: reporter: libreport-2.3.0 hashmarkername: setroubleshoot kernel: 3.19.3-200.fc21.x86_64 type: libreport Description of problem: Se presento al iniciar el sistema. Version-Release number of selected component: selinux-policy-3.13.1-99.fc21.noarch Additional info: reporter: libreport-2.3.0 hashmarkername: setroubleshoot kernel: 3.17.4-301.fc21.x86_64 type: libreport Description of problem: I Version-Release number of selected component: selinux-policy-3.13.1-105.21.fc21.noarch Additional info: reporter: libreport-2.3.0 hashmarkername: setroubleshoot kernel: 4.1.13-100.fc21.x86_64 type: libreport Description of problem: I was loging in Version-Release number of selected component: selinux-policy-3.13.1-105.21.fc21.noarch Additional info: reporter: libreport-2.3.0 hashmarkername: setroubleshoot kernel: 4.1.13-100.fc21.x86_64 type: libreport Description of problem: I dont know Version-Release number of selected component: selinux-policy-3.13.1-105.21.fc21.noarch Additional info: reporter: libreport-2.3.0 hashmarkername: setroubleshoot kernel: 4.1.13-100.fc21.x86_64 type: libreport Description of problem: I dont know It represents at starting Version-Release number of selected component: selinux-policy-3.13.1-105.21.fc21.noarch Additional info: reporter: libreport-2.3.0 hashmarkername: setroubleshoot kernel: 4.1.13-100.fc21.x86_64 type: libreport |
Description of problem: selected onscreen keyboard (as part of testing) 1) The Layout for the Canadian French keyboard is missing a key between the left shift key and the Z. 2) The on screen keyboard does not have any of the special characters matching the layout of the Canadian French keyboard. 3) The Euro is shwn on the On Screen keyboard, but is not present on the Canadian French keyboard (Consensus is that the Euro should be sharing the E key and the yen the Y key 4) I cannot enter accented characters. 5) The keyboard layout for Latam does not match the latam layout. Please refer to wikipaedia for (iso) layouts By the way, Prior to Gnome new look (Fedora 18 and before, the layouts were correctly shown for Canada French and Latam. Starting up the on-screen keyboard generated this error. SELinux is preventing ibus-x11 from 'connectto' accesses on the unix_stream_socket @/tmp/dbus-23MRaeN85Y. ***** Plugin catchall (100. confidence) suggests ************************** If you believe that ibus-x11 should be allowed connectto access on the dbus-23MRaeN85Y unix_stream_socket by default. Then you should report this as a bug. You can generate a local policy module to allow this access. Do allow this access for now by executing: # grep ibus-x11 /var/log/audit/audit.log | audit2allow -M mypol # semodule -i mypol.pp Additional Information: Source Context system_u:system_r:xdm_t:s0-s0:c0.c1023 Target Context unconfined_u:unconfined_r:unconfined_dbusd_t:s0-s0 :c0.c1023 Target Objects @/tmp/dbus-23MRaeN85Y [ unix_stream_socket ] Source ibus-x11 Source Path ibus-x11 Port <Unknown> Host (removed) Source RPM Packages Target RPM Packages Policy RPM selinux-policy-3.13.1-91.fc21.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name (removed) Platform Linux (removed) 3.17.1-302.fc21.x86_64 #1 SMP Fri Oct 17 20:05:46 UTC 2014 x86_64 x86_64 Alert Count 1 First Seen 2014-11-04 22:47:16 EST Last Seen 2014-11-04 22:47:16 EST Local ID 028c8e33-ed2c-4cb9-8893-935a2d24b6c8 Raw Audit Messages type=AVC msg=audit(1415159236.93:504): avc: denied { connectto } for pid=2586 comm="ibus-x11" path=002F746D702F646275732D32334D5261654E383559 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_dbusd_t:s0-s0:c0.c1023 tclass=unix_stream_socket permissive=0 Hash: ibus-x11,xdm_t,unconfined_dbusd_t,unix_stream_socket,connectto Version-Release number of selected component: selinux-policy-3.13.1-91.fc21.noarch Additional info: reporter: libreport-2.3.0 hashmarkername: setroubleshoot kernel: 3.17.1-302.fc21.x86_64 type: libreport Potential duplicate: bug 1054407