Bug 419571

Summary: Selinux prevents haldaemon to start
Product: [Fedora] Fedora Reporter: antonio montagnani <antonio.montagnani>
Component: halAssignee: David Zeuthen <davidz>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: low Docs Contact:
Priority: low    
Version: rawhideCC: jim.cornette, mclasen
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2007-12-20 22:19:36 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
/usr/sbin/hald (hald_t) "read" to (system_crond_var_lib_t). none

Description antonio montagnani 2007-12-11 11:17:49 UTC 
Description of problem:
Selinux prevents haldaemon to start 

Version-Release number of selected component (if applicable):
selinux-policy-3.2.2-1.fc9

How reproducible:
always is Selinux is Enforcing

Steps to Reproduce:
1.Boot the machine
2.
3.
  
Actual results:
Haldaemon is not started, so I don't see CD writer, USB pens, external disks

Expected results:
Everything should be seen

Additional info:

In Permissive mode everything is o.k
Comment 1 Jim Cornette 2007-12-11 11:55:13 UTC 
Created attachment 283961 [details]
 /usr/sbin/hald (hald_t) "read" to (system_crond_var_lib_t).

This denial message related to SELinux is seen in the troubleshooter browser.
SELinux is preventing /usr/sbin/hald (hald_t) "read" to
(system_crond_var_lib_t).
Comment 2 Jim Cornette 2007-12-11 11:57:59 UTC 
Once hal is started, using enforcing mode does not seem to produce errors.
Permissive mode is needed to start the daemon initially.
Comment 3 Daniel Walsh 2007-12-12 15:39:25 UTC 
This is actually a PolicyKit bug, which should install this file in 

/var/lib/PolicyKit-public

selinux-policy in rawhide allows hal to look there for the file.
Comment 4 Jeremy Katz 2007-12-20 22:19:36 UTC 

*** This bug has been marked as a duplicate of 425819 ***