Bug 1656979

Summary: [abrt] setroubleshoot: get(): proxy.py:47:get:gi.repository.GLib.GError: g-dbus-error-quark: GDBus.Error:org.freedesktop.DBus.Error.Spawn.ExecFailed: Failed to execute program org.fedoraproject.Setroubleshootd: Permission denied (23)
Product: [Fedora] Fedora Reporter: Markus Linnala <markus.linnala>
Component: setroubleshootAssignee: Daniel Walsh <dwalsh>
Status: CLOSED WORKSFORME QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 29CC: andsild, bernard827, bill_pachc, bugzilla.redhat, dwalsh, hk-imada, jeyzth, mihai, plautrba, romain.ballais, vmojzis, yjs0331
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/3ac8dc611d856924b95c7a42599a0465b11cae30
Whiteboard: abrt_hash:87ef1f3b96e9b086fd95d102703af83b776c698e;VARIANT_ID=workstation;
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2019-08-28 16:56:16 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: backtrace
none
File: cgroup
none
File: cpuinfo
none
File: environ
none
File: mountinfo
none
File: namespaces
none
File: open_fds none

Description Markus Linnala 2018-12-06 19:21:58 UTC 
Description of problem:
I did normal install to Fedora Workstation. After minimal setup I encoutered problem with dbus not running programs because of Permission denied.

The problem was bad permissions of dbus-daemon-launch-helper. Because of problems with rpm --restore I needed to to also setcap -r .... to fix this.

[root@localhost ~]# ls -lZa /usr/libexec/dbus-1/dbus-daemon-launch-helper
-rwsr-x---. 1 root root system_u:object_r:dbusd_exec_t:s0 74320  3. 8. 09:10 /usr/libexec/dbus-1/dbus-daemon-launch-helper
[root@localhost ~]# rpm -V dbus-daemon
.M.......  g /run/dbus
......G..    /usr/libexec/dbus-1/dbus-daemon-launch-helper
[root@localhost ~]# rpm --restore dbus-daemon
[root@localhost ~]# rpm -V dbus-daemon
[root@localhost ~]# ls -lZa /usr/libexec/dbus-1/dbus-daemon-launch-helper
-rwsr-x---. 1 root dbus system_u:object_r:dbusd_exec_t:s0 74320  3. 8. 09:10 /usr/libexec/dbus-1/dbus-daemon-launch-helper
[root@localhost ~]# setcap -r /usr/libexec/dbus-1/dbus-daemon-launch-helper

I have no idea where this wrong permissions are initially found but should not be something done during initial setup.

Mainly:

cd /etc/audit/rules.d/
cat > local.rules
-w /etc/shadow -p w

systemctl enable --now sshd
fixfiles onboot
vi /etc/sudoers
dnf install -y setroubleshoot{,-server} setools-console strace

And then rebooted to fix files. There were this problem without that:
https://bugzilla.redhat.com/show_bug.cgi?id=1644313

I'm mainly reporting this to give hints how to fix it.

Problem was I could not start setroubleshoot app or abrt app.

[root@localhost ~]# abrt-cli ls
Can't connect to system DBus: Error calling StartServiceByName for org.freedesktop.problems: GDBus.Error:org.freedesktop.DBus.Error.Spawn.FailedToSetup: Failed to setup environment correctly

joulu 06 20:42:12 localhost.localdomain dbus-daemon[720]: [system] Activated service 'org.freedesktop.problems' failed: Failed to execute program org.freedesktop.problems: Permission denied
joulu 06 20:42:12 localhost.localdomain abrt-applet.desktop[1913]: abrt-applet: Can't connect to system DBus: Error calling StartServiceByName for org.freedesktop.problems: GDBus.Error:org.freedesktop.DBus.Error.Spawn.ExecFailed: Failed to execute program org.freedesktop.problems: Permission denied
joulu 06 20:42:12 localhost.localdomain abrt-applet.desktop[1913]: abrt-applet: Can't connect to system DBus: Error calling StartServiceByName for org.freedesktop.problems: GDBus.Error:org.freedesktop.DBus.Error.Spawn.ExecFailed: Failed to execute program org.freedesktop.problems: Permission denied
joulu 06 20:42:12 localhost.localdomain dbus-daemon[720]: [system] Activated service 'org.freedesktop.problems' failed: Failed to execute program org.freedesktop.problems: Permission denied
joulu 06 20:42:12 localhost.localdomain dbus-daemon[720]: [system] Activated service 'org.freedesktop.problems' failed: Failed to execute program org.freedesktop.problems: Permission denied
joulu 06 20:42:12 localhost.localdomain abrt-applet.desktop[1913]: WARNING:root:Can't connect to DBus system bus 'org.freedesktop.problems' path '/org/freedesktop/problems': org.freedesktop.DBus.Error.Spawn.ExecFailed: Failed to execute program org.freedesktop.problems: Permission denied
joulu 06 20:42:12 localhost.localdomain dbus-daemon[720]: [system] Activated service 'org.freedesktop.problems' failed: Failed to execute program org.freedesktop.problems: Permission denied
joulu 06 20:42:12 localhost.localdomain abrt-applet.desktop[1913]: WARNING:root:Can't connect to DBus system bus 'org.freedesktop.problems' path '/org/freedesktop/problems': org.freedesktop.DBus.Error.Spawn.ExecFailed: Failed to execute program org.freedesktop.problems: Permission denied
joulu 06 20:49:49 localhost.localdomain dbus-daemon[720]: [system] Activated service 'org.freedesktop.problems' failed: Failed to execute program org.freedesktop.problems: Permission denied
joulu 06 20:50:57 localhost.localdomain dbus-daemon[720]: [system] Activated service 'org.freedesktop.problems' failed: Failed to execute program org.freedesktop.problems: Permission denied
joulu 06 20:51:31 localhost.localdomain dbus-daemon[720]: [system] Activated service 'org.fedoraproject.Setroubleshootd' failed: Failed to execute program org.fedoraproject.Setroubleshootd: Permission denied
joulu 06 20:51:35 localhost.localdomain dbus-daemon[720]: [system] Activated service 'org.freedesktop.problems' failed: Failed to execute program org.freedesktop.problems: Permission denied
joulu 06 20:51:38 localhost.localdomain dbus-daemon[720]: [system] Activated service 'org.freedesktop.problems' failed: Failed to execute program org.freedesktop.problems: Permission denied
joulu 06 20:52:05 localhost.localdomain dbus-daemon[720]: [system] Activated service 'org.freedesktop.problems' failed: Failed to execute program org.freedesktop.problems: Permission denied
joulu 06 20:52:59 localhost.localdomain dbus-daemon[720]: [system] Activated service 'org.freedesktop.problems' failed: Failed to execute program org.freedesktop.problems: Permission denied
joulu 06 20:56:45 localhost.localdomain dbus-daemon[720]: [system] Activated service 'org.fedoraproject.Setroubleshootd' failed: Failed to execute program org.fedoraproject.Setroubleshootd: Permission denied
joulu 06 20:56:45 localhost.localdomain dbus-daemon[720]: [system] Activated service 'org.fedoraproject.Setroubleshootd' failed: Failed to execute program org.fedoraproject.Setroubleshootd: Permission denied

Version-Release number of selected component:
setroubleshoot-3.3.18-1.fc29

Additional info:
reporter:       libreport-2.9.6
cmdline:        /usr/bin/python3 /usr/bin/seapplet
crash_function: get
exception_type: gi.repository.GLib.GError
executable:     /usr/bin/seapplet
interpreter:    python3-3.7.1-4.fc29.x86_64
kernel:         4.19.6-300.fc29.x86_64
runlevel:       N 5
type:           Python3
uid:            1000

Truncated backtrace:
proxy.py:47:get:gi.repository.GLib.GError: g-dbus-error-quark: GDBus.Error:org.freedesktop.DBus.Error.Spawn.ExecFailed: Failed to execute program org.fedoraproject.Setroubleshootd: Permission denied (23)

Traceback (most recent call last):
  File "/usr/bin/seapplet", line 163, in <module>
    my = SEApplet()
  File "/usr/bin/seapplet", line 85, in __init__
    '/org/fedoraproject/Setroubleshootd'
  File "/usr/lib/python3.7/site-packages/pydbus/proxy.py", line 47, in get
    0, timeout_to_glib(timeout), None)
gi.repository.GLib.GError: g-dbus-error-quark: GDBus.Error:org.freedesktop.DBus.Error.Spawn.ExecFailed: Failed to execute program org.fedoraproject.Setroubleshootd: Permission denied (23)

Local variables in innermost frame:
self: <pydbus.bus.Bus object at 0x7f4b55d4e668>
bus_name: 'org.fedoraproject.Setroubleshootd'
object_path: '/org/fedoraproject/Setroubleshootd'
kwargs: {}
timeout: None
Comment 1 Markus Linnala 2018-12-06 19:22:03 UTC 
Created attachment 1512234 [details]
File: backtrace
Comment 2 Markus Linnala 2018-12-06 19:22:05 UTC 
Created attachment 1512235 [details]
File: cgroup
Comment 3 Markus Linnala 2018-12-06 19:22:06 UTC 
Created attachment 1512236 [details]
File: cpuinfo
Comment 4 Markus Linnala 2018-12-06 19:22:08 UTC 
Created attachment 1512237 [details]
File: environ
Comment 5 Markus Linnala 2018-12-06 19:22:09 UTC 
Created attachment 1512238 [details]
File: mountinfo
Comment 6 Markus Linnala 2018-12-06 19:22:11 UTC 
Created attachment 1512239 [details]
File: namespaces
Comment 7 Markus Linnala 2018-12-06 19:22:12 UTC 
Created attachment 1512240 [details]
File: open_fds
Comment 8 Anders Sildnes 2019-03-16 11:28:55 UTC 
Similar problem has been detected:

I did a fresh install, updated my system using GUI update, then just rebooted, and got the error message.

reporter:       libreport-2.10.0
cmdline:        /usr/bin/python3 /usr/bin/seapplet
crash_function: get
exception_type: gi.repository.GLib.GError
executable:     /usr/bin/seapplet
interpreter:    python3-3.7.0-9.fc29.x86_64
kernel:         4.18.16-300.fc29.x86_64
package:        setroubleshoot-3.3.18-1.fc29
reason:         proxy.py:47:get:gi.repository.GLib.GError: g-dbus-error-quark: GDBus.Error:org.freedesktop.DBus.Error.Spawn.ExecFailed: Failed to execute program org.fedoraproject.Setroubleshootd: Permission denied (23)
runlevel:       N 5
type:           Python3
uid:            1000
Comment 9 Dagan McGregor 2019-04-15 03:46:39 UTC 
*** Bug 1699708 has been marked as a duplicate of this bug. ***
Comment 10 Markus Linnala 2019-08-28 16:56:16 UTC 
I made installation currently using: 
Fedora-Workstation-netinst-x86_64-29-1.2.iso

dbus-daemon-1.12.12-1.fc29.x86_64
setroubleshoot-3.3.20-1.fc29.x86_64
kernel-5.2.7-100.fc29.x86_64
python3-3.7.4-1.fc29.x86_64

And was not able to repeat issues.