Bug 585459 - lircd service fails to start with lirc-0.8.6-1.fc11.x86_64
lircd service fails to start with lirc-0.8.6-1.fc11.x86_64
Status: CLOSED ERRATA
Product: Fedora
Classification: Fedora
Component: selinux-policy-targeted (Show other bugs)
11
All Linux
low Severity medium
: ---
: ---
Assigned To: Miroslav Grepl
Ben Levenson
:
Depends On:
Blocks:
  Show dependency treegraph
 
Reported: 2010-04-24 03:15 EDT by Alex Lancaster
Modified: 2010-05-04 08:44 EDT (History)
2 users (show)

See Also:
Fixed In Version: lirc-0.8.6-2.fc11
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2010-05-03 12:11:41 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)

  None (edit)
Description Alex Lancaster 2010-04-24 03:15:25 EDT
When I try to start the lircd service I get:

sudo /etc/init.d/lirc start
Starting infrared remote control daemon (lircd): lircd: could not assign address to socket
lircd: Permission denied
                                                           [FAILED]


In the logs I see selinux errors, here's the excerpts from /var/log/audit/audit.log:

type=CONFIG_CHANGE msg=audit(1272092444.516:15372): audit_backlog_limit=320 old=256 auid=4294967295 ses=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
type=AVC msg=audit(1272092448.958:15373): avc:  denied  { create } for  pid=1682 comm="lircd" name="lircd" scontext=system_u:system_r:lircd_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=sock_file
type=SYSCALL msg=audit(1272092448.958:15373): arch=c000003e syscall=49 success=no exit=-13 a0=4 a1=7ffff702a950 a2=6e a3=7ffff702a660 items=0 ppid=1681 pid=1682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="lircd" exe="/usr/sbin/lircd" subj=system_u:system_r:lircd_t:s0 key=(null)

I am using the version in updates-testing here:

https://admin.fedoraproject.org/updates/lirc-0.8.6-1.fc11

I am also using kernel-2.6.32.10-44.fc11.x86_64 in updates-testing.
Comment 1 Alex Lancaster 2010-04-24 05:49:28 EDT
Add Jarod, in case he has any insights as to what new selinux rules are needed for the new lirc.
Comment 2 Daniel Walsh 2010-04-26 09:11:11 EDT
This looks like /var/run/lirc or /var/run/lircd is not labeled correctly.

Miroslav we might need to backport F12 lirc policy to F11.
Comment 3 Miroslav Grepl 2010-04-26 09:29:59 EDT
Yes, it looks so. I will backport the lirc policy.
Comment 4 Alex Lancaster 2010-04-26 13:17:24 EDT
(In reply to comment #3)
> Yes, it looks so. I will backport the lirc policy.    

Meanwhile, can you post a command-line as a workaround to fix the labelling until the new policy gets pushed?  Thanks.
Comment 5 Miroslav Grepl 2010-04-27 07:06:54 EDT
Fixed in selinux-policy-3.6.12-98.fc11.
Comment 6 Miroslav Grepl 2010-04-27 07:10:40 EDT
You can download selinux-policy and selinux-policy-targeted packages and install these packages from Koji for now.

http://koji.fedoraproject.org/koji/buildinfo?buildID=168966
Comment 7 Bug Zapper 2010-04-28 08:03:14 EDT
This message is a reminder that Fedora 11 is nearing its end of life.
Approximately 30 (thirty) days from now Fedora will stop maintaining
and issuing updates for Fedora 11.  It is Fedora's policy to close all
bug reports from releases that are no longer maintained.  At that time
this bug will be closed as WONTFIX if it remains open with a Fedora 
'version' of '11'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, simply change the 'version' 
to a later Fedora version prior to Fedora 11's end of life.

Bug Reporter: Thank you for reporting this issue and we are sorry that 
we may not be able to fix it before Fedora 11 is end of life.  If you 
would still like to see this bug fixed and are able to reproduce it 
against a later version of Fedora please change the 'version' of this 
bug to the applicable version.  If you are unable to change the version, 
please add a comment here and someone will do it for you.

Although we aim to fix as many bugs as possible during every release's 
lifetime, sometimes those efforts are overtaken by events.  Often a 
more recent Fedora release includes newer upstream software that fixes 
bugs or makes them obsolete.

The process we are following is described here: 
http://fedoraproject.org/wiki/BugZappers/HouseKeeping
Comment 8 Alex Lancaster 2010-04-29 04:38:03 EDT
(In reply to comment #6)
> You can download selinux-policy and selinux-policy-targeted packages and
> install these packages from Koji for now.
> 
> http://koji.fedoraproject.org/koji/buildinfo?buildID=168966    

Great, seems to work now, thanks!  Can you submit this as proper bodhi update to updates-testing?
Comment 9 Alex Lancaster 2010-04-29 04:39:43 EDT
(In reply to comment #8)
> (In reply to comment #6)
> > You can download selinux-policy and selinux-policy-targeted packages and
> > install these packages from Koji for now.
> > 
> > http://koji.fedoraproject.org/koji/buildinfo?buildID=168966    
> 
> Great, seems to work now, thanks!  Can you submit this as proper bodhi update
> to updates-testing?    

Of course it should be added or otherwise combined with the relevant lirc update so it goes out at the same time: 

https://admin.fedoraproject.org/updates/lirc-0.8.6-1.fc11
Comment 10 Fedora Update System 2010-04-29 10:27:11 EDT
selinux-policy-3.6.12-98.fc11,lirc-0.8.6-2.fc11 has been submitted as an update for Fedora 11.
http://admin.fedoraproject.org/updates/selinux-policy-3.6.12-98.fc11,lirc-0.8.6-2.fc11
Comment 11 Fedora Update System 2010-05-03 12:11:37 EDT
lirc-0.8.6-2.fc11, selinux-policy-3.6.12-98.fc11 has been pushed to the Fedora 11 stable repository.  If problems still persist, please make note of it in this bug report.
Comment 12 Darwin Slattery 2010-05-04 07:15:39 EDT
I am using the i586 version of lirc but lirc has stopped working since these latest updates. The service starts fine and I'm not seeing any errors in the 'secure' or 'messages' logs or in dmesg. irw also starts but I get no response to buttons on my remote. 

I reverted back to 8.5.3 but that didn't solve it. I'm running in permissive mode but the selinux update seems to be the root of the problem. Is there anything else I can do to help diagnose this problem?

kernel: 2.6.30.10-105.2.23.fc11.i686.PAE
tv card: Hauppage PVR-350
selinux-policy-targeted-3.6.12-98.fc11.noarch
selinux-policy-3.6.12-98.fc11.noarch
lirc-doc-0.8.6-2.fc11.i586
lirc-libs-0.8.6-2.fc11.i586
lirc-0.8.6-2.fc11.i586
lirc-remotes-0.8.6-2.fc11.i586

Thanks in advance.
Comment 13 Miroslav Grepl 2010-05-04 07:57:30 EDT
So you are running in permissive mode but it doesn't work. Then it doesn't look like SELinux problem.

Are you seeing any AVC messages in /var/log/audit/audit.log?
Comment 14 Darwin Slattery 2010-05-04 08:44:46 EDT
Thanks for your reply.

I'm not seeing anything to do with lirc in audit.log. I thought that permissive mode would prevent problems too but I have had selinux updates causing issues with lirc before.

I'll keep looking for clues. Thanks again.

Note You need to log in before you can comment on or make changes to this bug.