Bug 433120

Summary:	selinux stops acpid finding gnome-power-manager
Product:	[Fedora] Fedora	Reporter:	simon
Component:	selinux-policy	Assignee:	Daniel Walsh <dwalsh>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	low	Docs Contact:
Priority:	low
Version:	8
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2008-11-17 22:03:06 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description simon 2008-02-16 15:19:16 UTC

Description of problem:
The default acpid scrips hook into the power button press to shutdown the
machine if gnome-power-manager is not present.
The acpid script runs ck-list-sessions to find the uid of users with an open
display. However this fails to return output when run from the acpid script
causing the machine to power down regardless of gnome-power-manager
Inserting the following line into /etc/acpi/actions/power.sh 

ck-list-sessions > /tmp/acpid-output 2>&1

yields;

** (ck-list-sessions:3197): WARNING **: Failed to get list of seats: An SELinux
policy prevents this sender from sending this message to this recipient
(rejected message had interface "org.freedesktop.ConsoleKit.Manager" member
"GetSeats" error name "(unset)" destination "org.freedesktop.ConsoleKit")

Where as running from a terminal gives me a result.

Version-Release number of selected component (if applicable):
selinux-policy-3.0.8-84.fc8

How reproducible:


Steps to Reproduce:
1.
2.
3.
  
Actual results:


Expected results:


Additional info:

Comment 1 Daniel Walsh 2008-02-26 21:49:49 UTC

You can allow this for now by executing 

# audit2allow -M mypol -i /var/log/audit/audit.log 
# semodule -i mypol.pp

Fixed in selinux-policy-3.0.8-89.fc8

Comment 2 Daniel Walsh 2008-11-17 22:03:06 UTC

Closing all bugs that have been in modified for over a month.  Please reopen if the bug is not actually fixed.