Bug 448742 - selinux policy prevents macbook's backlight from working
Summary: selinux policy prevents macbook's backlight from working
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy
Version: 9
Hardware: i386
OS: Linux
low
low
Target Milestone: ---
Assignee: Daniel Walsh
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2008-05-28 15:06 UTC by Brian Jedsen
Modified: 2008-07-02 19:07 UTC (History)
1 user (show)

Fixed In Version: 72
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2008-07-02 19:07:24 UTC
Type: ---
Embargoed:

Attachments (Terms of Use)
seliux policies to allow hal to work with macbook's backlight (370 bytes, application/octet-stream)
2008-05-28 15:06 UTC, Brian Jedsen 		no flags Details
avc denials that lead to generation od above policy (2.51 KB, text/plain)
2008-05-28 16:53 UTC, Brian Jedsen 		no flags Details
View All

Description Brian Jedsen 2008-05-28 15:06:40 UTC 
Description of problem:
The SELinux policy concerning HAL prevents the macbook backlight's brightness
controls from working.

Version-Release number of selected component (if applicable):


How reproducible:
Always

Steps to Reproduce:
1. Install Fedora 9 on a macbook
2. Try to use the backlight controls
3. Restart haldaemon and see the selinux denials
  
Actual results:
Backlight controls do not work

Expected results:
Backlight controls should work with HAL's fdi policy.

Additional info:
I was able to add some selinux policies to get the backlight working (see
attached local.te file).
Comment 1 Brian Jedsen 2008-05-28 15:06:40 UTC 
Created attachment 306937 [details]
seliux policies to allow hal to work with macbook's backlight
Comment 2 Daniel Walsh 2008-05-28 15:16:27 UTC 
Please attach the avc's used to create this policy
Comment 3 Brian Jedsen 2008-05-28 16:53:22 UTC 
Created attachment 306950 [details]
avc denials that lead to generation od above policy

I believe this is all of them.
Comment 4 Daniel Walsh 2008-07-02 19:07:24 UTC 
Fixed in selinux-policy-3.3.1-72.fc9.noarch
Note You need to log in before you can comment on or make changes to this bug.