Bug 178359 - hcid won't start due to selinux problem
Summary: hcid won't start due to selinux problem
Keywords:
Status: CLOSED WORKSFORME
Alias: None
Product: Fedora
Classification: Fedora
Component: bluez-utils
Version: rawhide
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: David Woodhouse
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2006-01-19 20:00 UTC by Brian G. Anderson
Modified: 2007-11-30 22:11 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2006-09-10 08:55:42 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Brian G. Anderson 2006-01-19 20:00:03 UTC
Description of problem:
As of 1/19/2006 the hcid daemon won't start unless the enforcing=0.


Version-Release number of selected component (if applicable):
bluez-utils-2.22-2.1
selinux-policy-2.1.13-1
selinux-policy-targeted-2.1.13-1



How reproducible:
always


Steps to Reproduce:
1.
2.
3.
  
Actual results:
hcid doesn't start and I cannot use bluetooth devices

Expected results:
hcid starts


Additional info:

Comment 1 Brian G. Anderson 2006-02-03 12:48:04 UTC
This still occurs with:
selinux-policy-2.2.9-2
selinux-policy-targeted-2.2.9-2


Comment 2 Brian G. Anderson 2006-02-03 13:01:00 UTC
audit2why tells me:
type=AVC msg=audit(1138959953.541:158): avc:  denied  { read } for  pid=3448
comm="hid2hci" name="001" dev=tmpfs ino=3564
scontext=user_u:system_r:bluetooth_t:s0 tcontext=system_u:object_r:device_t:s0
tclass=chr_file



audit2allow tells me:
allow bluetooth_t device_t:chr_file read;


Comment 3 illtud 2006-03-24 15:13:40 UTC
Me too. hcid bombs out with:

Mar 24 15:15:28 localhost hcid[18217]: Bluetooth HCI daemon
Mar 24 15:15:28 localhost hcid[18217]: Can't get system message bus name:
Connection ":1.16" is not allowed to own the service "org.bluez" due to SELinux
policyMar 24 15:15:28 localhost hcid[18217]: Unable to get on D-BUS

Comment 4 Guy Streeter 2006-03-28 20:01:58 UTC
On released FC5, I get the same /var/log/messages entries about hcid as above,
but the only audit messages I see are about bluez-pin, not hcid.


Comment 5 David Woodhouse 2006-09-10 08:55:42 UTC
Please re-open and file against selinux-policy is this is still happening.


Note You need to log in before you can comment on or make changes to this bug.