Bug 1559341

Summary:	SELinux blocks bluetooth from working
Product:	[Fedora] Fedora	Reporter:	Jiri Eischmann <jeischma>
Component:	selinux-policy	Assignee:	Lukas Vrabec <lvrabec>
Status:	CLOSED ERRATA	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	28	CC:	awilliam, dwalsh, fzatlouk, gmarr, jeischma, lvrabec, mgrepl, plautrba, pmoore, rbarlow, robatino
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:	AcceptedFreezeException
Fixed In Version:	selinux-policy-3.14.1-17.fc28 selinux-policy-3.14.1-18.fc28	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2018-03-26 22:31:41 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1469205, 1469206

Description Jiri Eischmann 2018-03-22 11:01:17 UTC

The current SELinux policy blocks the bluetooth socket and makes bluetooth work very unreliable or not at all.
I either can't connect devices at all or I can, but they disconnect very shortly after that and bluetooth becomes unavailable.
I could reproduce the issue on various computers with F28.

I debugged the issue with the SELinux policy maintainer and it should be fixed in the build in Koji: https://koji.fedoraproject.org/koji/buildinfo?buildID=1061018

I'm filing this bug to make sure that the update lands in Fedora 28 before the final release because I think it's severe enough to qualify for a blocker.

Comment 1 Fedora Blocker Bugs Application 2018-03-22 11:04:56 UTC

Proposed as a Blocker for 28-final by Fedora user eischmann using the blocker tracking app because:

 This makes Bluetooth not to work which means a whole settings module in gnome-control-center doesn't work which I think doesn't meet the "Default application functionality" criteria.

Comment 2 František Zatloukal 2018-03-22 18:50:48 UTC

Discussed during blocker review [1]:

AcceptedFreezeException (Beta) - this is a significant functionality issue that will affect lives etc., would be good to fix it for the compose

[1] https://meetbot-raw.fedoraproject.org/fedora-meeting-1/2018-03-22/

Comment 3 Fedora Update System 2018-03-25 13:12:03 UTC

selinux-policy-3.14.1-17.fc28 has been submitted as an update to Fedora 28. https://bodhi.fedoraproject.org/updates/FEDORA-2018-b8cb71b345

Comment 4 Fedora Update System 2018-03-25 20:32:50 UTC

selinux-policy-3.14.1-17.fc28 has been pushed to the Fedora 28 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2018-b8cb71b345

Comment 5 Geoffrey Marr 2018-03-26 19:09:34 UTC

Discussed during the 2018-03-26 blocker review meeting: [1]

The decision to delay the classification of this bug as a blocker was made as it's not really clear whether this should be considered a blocker or not, but as the fix has already been accepted as a Beta FE, we will wait for the fix to be applied and this bug should no longer be a problem.

[1] https://meetbot.fedoraproject.org/fedora-blocker-review/2018-03-26/f28-blocker-review.2018-03-26-16.01.txt

Comment 6 Fedora Update System 2018-03-26 21:51:19 UTC

selinux-policy-3.14.1-18.fc28 has been submitted as an update to Fedora 28. https://bodhi.fedoraproject.org/updates/FEDORA-2018-7821b2e7c4

Comment 7 Fedora Update System 2018-03-26 22:31:41 UTC

selinux-policy-3.14.1-18.fc28 has been pushed to the Fedora 28 stable repository. If problems still persist, please make note of it in this bug report.