Bug 476914 - security policy prevents bluetooth from working
Summary: security policy prevents bluetooth from working
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: dbus
Version: 10
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: David Zeuthen
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2008-12-17 22:19 UTC by Jeff Bastian
Modified: 2013-03-06 03:57 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2008-12-18 15:39:58 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Jeff Bastian 2008-12-17 22:19:56 UTC
Description of problem:
I'm not sure if this is a bluez problem or dbus problem.

I'm trying to connect my F10 system to my mobile phone via Bluetooth.  I click on the Bluetooth icon in the system tray, click on "Setup new device", and on the 2nd step of the wizard, there are no devices available to select.

This error appears in my ~/.xsession-errors file:
    Agent registration failed: A security policy in place prevents this sender from sending this message to this recipient, see message bus configuration file (rejected message had interface "org.bluez.Adapter" member "RegisterAgent" error name "(unset)" destination "org.bluez")

I then tried checking if my laptop was discoverable with the command as suggested in the BlueZ FAQ (http://wiki.bluez.org/wiki/FAQ):
    dbus-send --system --type=method_call --print-reply \
        --dest=org.bluez /org/bluez/hci0 org.bluez.Adapter.GetMode
and it returned a similar error:
    Error org.freedesktop.DBus.Error.AccessDenied: A security policy in place prevents this sender from sending this message to this recipient, see message bus configuration file (rejected message had interface "org.bluez.Adapter" member "GetMode" error name "(unset)" destination "org.bluez")


Version-Release number of selected component (if applicable):
dbus-1.2.8-1.fc10.x86_64
bluez-4.19-1.fc10.x86_64


How reproducible:
Every time

Steps to Reproduce:
1. Try to configure a device using the Bluetooth wizard in the system tray
  
Actual results:
No devices are listed, and errors appear in ~/.xsession-errors

Expected results:
Bluetooth works

Additional info:

Comment 1 Jeff Bastian 2008-12-17 22:50:41 UTC
I just tried a suggestion I found on
http://support.zenwalk.org/viewtopic.php?p=108827&sid=9d3715f2ffd3aca39c075f59eb155414 

I modified /etc/dbus-1/system.conf as follows:
--- /etc/dbus-1/system.conf.ORIG        2008-12-09 10:29:24.000000000 -0600
+++ /etc/dbus-1/system.conf     2008-12-17 16:42:13.000000000 -0600
@@ -55,9 +55,8 @@
     <allow receive_sender="org.freedesktop.DBus"/>
     <!-- Allow all signals to be sent by default -->
     <allow send_type="signal"/>
-    <!-- allow sending valid replies -->
-    <allow send_requested_reply="true" send_type="method_return"/>
-    <allow send_requested_reply="true" send_type="error"/>
+    <!-- allow sending replies -->
+    <allow send_requested_reply="true"/>
     <!-- allow receiving valid replies -->
     <allow receive_requested_reply="true"/>
     <!-- Note: the rule above also allows receiving of all non-reply messages


I rebooted and now Bluetooth works again.

I assume this opens security holes, so I restored my original /etc/dbus-1/system.conf and broke Bluetooth again.

Comment 2 Jeff Bastian 2008-12-18 15:39:58 UTC
I "upgraded" to dbus-1.2.4-2.fc10 that was just pushed out and Bluetooth works as expected now.  I'll close this.


Note You need to log in before you can comment on or make changes to this bug.