Hide Forgot
Description of problem: just enable firewalld and firewall-applet, after that I tried change from trusted zone to internal zone. to test smb browser in F19. but applet crash and don't change the zone, after that also, menu to change zone appears in blank without options. Version-Release number of selected component: firewall-applet-0.3.8-1.fc19 Additional info: reporter: libreport-2.1.9 cmdline: /usr/bin/python /usr/bin/firewall-applet executable: /usr/bin/firewall-applet kernel: 3.11.10-200.fc19.x86_64 runlevel: N 5 type: Python uid: 500 Truncated backtrace: connection.py:651:call_blocking:DBusException: org.freedesktop.NetworkManager.Settings.PermissionDenied: uid 500 has no permission to perform this operation Traceback (most recent call last): File "/usr/bin/firewall-applet", line 759, in change_zone_connection_editor editor.run() File "/usr/bin/firewall-applet", line 170, in run settings = connection_obj.GetSettings() File "/usr/lib/python2.7/site-packages/dbus/proxies.py", line 70, in __call__ return self._proxy_method(*args, **keywords) File "/usr/lib/python2.7/site-packages/slip/dbus/proxies.py", line 50, in __call__ return dbus.proxies._ProxyMethod.__call__(self, *args, **kwargs) File "/usr/lib/python2.7/site-packages/dbus/proxies.py", line 145, in __call__ **keywords) File "/usr/lib/python2.7/site-packages/dbus/connection.py", line 651, in call_blocking message, timeout) DBusException: org.freedesktop.NetworkManager.Settings.PermissionDenied: uid 500 has no permission to perform this operation Local variables in innermost frame: byte_arrays: False self: <dbus._dbus.SystemBus (system) at 0x1733b30> args: () object_path: '/org/freedesktop/NetworkManager/Settings/10' signature: None bus_name: dbus.UTF8String(':1.6') get_args_opts: {'byte_arrays': False, 'utf8_strings': False} timeout: 2147483.647 kwargs: {} dbus_interface: None message: <dbus.lowlevel.MethodCallMessage path: /org/freedesktop/NetworkManager/Settings/10, iface: n/a, member: GetSettings dest: :1.6> method: 'GetSettings'
Created attachment 835832 [details] File: backtrace
Created attachment 835833 [details] File: dso_list
Created attachment 835834 [details] File: environ
Please verify NetworkManager and firewalld permissions and settings. Have you had SELinux AVC messages also?
meanwhile I upgrade laptop to F20 , on F20 applet don't crash , but also doesn't work . Selinux disable Feb 11 16:19:24 segulix systemd: Starting firewalld - dynamic firewall daemon... Feb 11 16:19:28 segulix systemd: Started firewalld - dynamic firewall daemon. Feb 11 16:19:29 segulix NetworkManager[686]: nm_connection_get_setting_connection: assertion 'NM_IS_CONNECTION (connection)' failed Feb 11 16:19:30 segulix NetworkManager[686]: nm_connection_get_setting_connection: assertion 'NM_IS_CONNECTION (connection)' failed Feb 11 16:19:30 segulix NetworkManager[686]: nm_connection_get_setting_connection: assertion 'NM_IS_CONNECTION (connection)' failed Feb 11 16:19:32 segulix firewalld: 2014-02-11 16:19:31 ERROR: '/sbin/iptables -I POST_public 2 -t nat -j POST_public_deny' failed: iptables: Resource temporarily unavailable. Feb 11 16:19:33 segulix firewalld: 2014-02-11 16:19:31 ERROR: '/sbin/iptables -X POST_public -t nat' failed: iptables: Directory not empty. Feb 11 16:19:33 segulix firewalld: 2014-02-11 16:19:31 ERROR: '/sbin/iptables -D POST_public 1 -t nat -j POST_public_log' failed: iptables v1.4.19.1: Illegal option `-j' with this command Try `iptables -h' or 'iptables --help' for more information. Feb 11 16:19:33 segulix firewalld: 2014-02-11 16:19:31 ERROR: COMMAND_FAILED: '/sbin/iptables -I POST_public 2 -t nat -j POST_public_deny' failed: iptables: Resource temporarily unavailable. Feb 11 16:20:01 segulix systemd: Starting Session 345 of user root. Feb 11 16:20:01 segulix systemd: Started Session 345 of user root. Feb 11 16:20:10 segulix NetworkManager[686]: ifcfg-rh: updating /etc/sysconfig/network-scripts/ifcfg-eth0 Feb 11 16:20:10 segulix firewalld: 2014-02-11 16:20:10 ERROR: '/sbin/iptables -N POST_public -t nat' failed: iptables: Chain already exists. Feb 11 16:20:10 segulix firewalld: 2014-02-11 16:20:10 ERROR: COMMAND_FAILED: '/sbin/iptables -N POST_public -t nat' failed: iptables: Chain already exists. Feb 11 16:20:10 segulix NetworkManager[686]: <warn> (eth0) firewall zone add/change failed: (32) COMMAND_FAILED: '/sbin/iptables -N POST_public -t nat' failed: iptables: Chain already exists. Feb 11 16:21:22 segulix NetworkManager[686]: ifcfg-rh: updating /etc/sysconfig/network-scripts/ifcfg-eth0 Feb 11 16:21:22 segulix firewalld: 2014-02-11 16:21:22 ERROR: '/sbin/iptables -N POST_public -t nat' failed: iptables: Chain already exists. Feb 11 16:21:22 segulix firewalld: 2014-02-11 16:21:22 ERROR: COMMAND_FAILED: '/sbin/iptables -N POST_public -t nat' failed: iptables: Chain already exists. Feb 11 16:21:22 segulix NetworkManager[686]: <warn> (eth0) firewall zone add/change failed: (32) COMMAND_FAILED: '/sbin/iptables -N POST_public -t nat' failed: iptables: Chain already exists. Feb 11 16:21:58 segulix NetworkManager[686]: ifcfg-rh: updating /etc/sysconfig/network-scripts/ifcfg-eth0 Feb 11 16:21:58 segulix firewalld: 2014-02-11 16:21:58 ERROR: '/sbin/iptables -N POST_public -t nat' failed: iptables: Chain already exists. Feb 11 16:21:58 segulix firewalld: 2014-02-11 16:21:58 ERROR: COMMAND_FAILED: '/sbin/iptables -N POST_public -t nat' failed: iptables: Chain already exists. Feb 11 16:21:59 segulix NetworkManager[686]: <warn> (eth0) firewall zone add/change failed: (32) COMMAND_FAILED: '/sbin/iptables -N POST_public -t nat' failed: iptables: Chain already exists.
Please add the output of rpm -qa "firewall*" rpm -qa "NetworkManager*" And also rpm -Va "firewall*" rpm -Va "NetworkManager*"
root@segulix:/var/www/html#rpm -Va `cat /var/log/rpmpkgs| grep -P "firewall|NetworkManager" ` root@segulix:/var/www/html#cat /var/log/rpmpkgs| grep -P "firewall|NetworkManager" firewall-applet-0.3.9.2-1.fc20.noarch firewall-config-0.3.9.2-1.fc20.noarch firewalld-0.3.9.2-1.fc20.noarch NetworkManager-0.9.9.0-28.git20131003.fc20.x86_64 NetworkManager-glib-0.9.9.0-28.git20131003.fc20.i686 NetworkManager-glib-0.9.9.0-28.git20131003.fc20.x86_64 NetworkManager-openconnect-0.9.8.0-2.fc20.x86_64 NetworkManager-openswan-0.9.8.0-1.fc20.x86_64 NetworkManager-openvpn-0.9.9.0-0.1.git20140128.fc20.x86_64 NetworkManager-openvpn-gnome-0.9.9.0-0.1.git20140128.fc20.x86_64 NetworkManager-pptp-0.9.8.2-3.fc20.x86_64 NetworkManager-pptp-gnome-0.9.8.2-3.fc20.x86_64 NetworkManager-vpnc-0.9.8.2-2.fc20.x86_64 NetworkManager-vpnc-gnome-0.9.8.2-2.fc20.x86_64 system-config-firewall-1.2.29-10.fc20.noarch system-config-firewall-base-1.2.29-10.fc20.noarch system-config-firewall-tui-1.2.29-10.fc20.noarch yum-NetworkManager-dispatcher-1.1.31-20.fc20.noarch rpm -Va no output
/etc/cron.daily/rpm cat /var/log/rpmpkgs| grep -P "firewall" firewall-applet-0.3.9.3-1.fc20.noarch firewall-config-0.3.9.3-1.fc20.noarch firewalld-0.3.9.3-1.fc20.noarch system-config-firewall-1.2.29-10.fc20.noarch system-config-firewall-base-1.2.29-10.fc20.noarch system-config-firewall-tui-1.2.29-10.fc20.noarch with this versions seems that firewall-applet is working correctly Thanks,