Bug 754412 - AVC denial for wicd
Summary: AVC denial for wicd
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: wicd
Version: 16
Hardware: All
OS: Linux
unspecified
medium
Target Milestone: ---
Assignee: David Cantrell
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
: 809736 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-11-16 12:28 UTC by Michal Haško
Modified: 2015-03-02 04:01 UTC (History)
4 users (show)

Fixed In Version: wicd-1.7.0-12.fc16
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2012-04-11 16:53:43 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Michal Haško 2011-11-16 12:28:14 UTC
I'm getting the following AVC denials on wicd (systemctl start wicd.service):

time->Wed Nov 16 13:04:05 2011
type=SYSCALL msg=audit(1321445045.236:181): arch=c000003e syscall=2 success=no exit=-13 a0=df6760 a1=241 a2=1b6 a3=6567616e616d2f70 items=0 ppid=1 pid=2932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="wicd" exe="/usr/bin/python" subj=system_u:system_r:NetworkManager_t:s0 key=(null)
type=AVC msg=audit(1321445045.236:181): avc:  denied  { write } for  pid=2932 comm="wicd" name="manager-settings.conf" dev=dm-2 ino=404182 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=unconfined_u:object_r:etc_t:s0 tclass=file

From /var/log/wicd.log :

2011/11/16 13:04:05 :: ---------------------------
2011/11/16 13:04:05 :: wicd initializing...
2011/11/16 13:04:05 :: ---------------------------
2011/11/16 13:04:05 :: wicd is version 1.7.0 552
2011/11/16 13:04:05 :: setting backend to external
2011/11/16 13:04:05 :: Traceback (most recent call last):
2011/11/16 13:04:05 ::   File "/usr/share/wicd/daemon/wicd-daemon.py", line 1838, in <module>
2011/11/16 13:04:05 ::     main(sys.argv)
2011/11/16 13:04:05 ::   File "/usr/share/wicd/daemon/wicd-daemon.py", line 1802, in main
2011/11/16 13:04:05 ::     daemon = WicdDaemon(wicd_bus, auto_connect=auto_connect)
2011/11/16 13:04:05 ::   File "/usr/share/wicd/daemon/wicd-daemon.py", line 114, in __init__
2011/11/16 13:04:05 ::     self.ReadConfig()
2011/11/16 13:04:05 ::   File "/usr/share/wicd/daemon/wicd-daemon.py", line 884, in ReadConfig
2011/11/16 13:04:05 ::     self.SetBackend(app_conf.get("Settings", "backend", default=be_def))
2011/11/16 13:04:05 ::   File "/usr/share/wicd/daemon/wicd-daemon.py", line 219, in SetBackend
2011/11/16 13:04:05 ::     self.config.set("Settings", "backend", backend, write=True)
2011/11/16 13:04:05 ::   File "/usr/lib/python2.7/site-packages/wicd/configmanager.py", line 76, in set
2011/11/16 13:04:05 ::     self.set_option(*args, **kargs)
2011/11/16 13:04:05 ::   File "/usr/lib/python2.7/site-packages/wicd/configmanager.py", line 72, in set_option
2011/11/16 13:04:05 ::     self.write()
2011/11/16 13:04:05 ::   File "/usr/lib/python2.7/site-packages/wicd/configmanager.py", line 199, in write
2011/11/16 13:04:05 ::     p._write_one()
2011/11/16 13:04:05 ::   File "/usr/lib/python2.7/site-packages/wicd/configmanager.py", line 132, in _write_one
2011/11/16 13:04:05 ::     configfile = open(self.config_file, 'w')
2011/11/16 13:04:05 :: IOError: [Errno 13] Permission denied: '/etc/dhcp/manager-settings.conf'

Version-Release number of selected component (if applicable):
wicd-common-1.7.0-9.fc16.noarch

How reproducible:
100%

Steps to Reproduce:
1. systemctl start wicd.service
  
Actual results:
AVC denial

Expected results:
no AVC denial

Additional info:
Happens on non-standard installation (minimal installation with extremely lightweight X environment on top).

Comment 1 Miroslav Grepl 2011-11-16 12:32:37 UTC
I thought the manager-settings.conf file should be located in the /etc/wicd directory?

Comment 2 David Cantrell 2012-03-22 13:18:06 UTC
You are correct, manager-settings.conf should be in /etc/wicd.  For some reason the setup.py is writing out wpath.py with etc set to '/etc/dhcp/'.  I'll fix that up in rawhide and f17, can you test there once I've got a new build in there?

Comment 3 Fedora Update System 2012-03-26 20:04:32 UTC
wicd-1.7.0-12.fc16 has been submitted as an update for Fedora 16.
https://admin.fedoraproject.org/updates/wicd-1.7.0-12.fc16

Comment 4 Fedora Update System 2012-03-31 02:58:43 UTC
Package wicd-1.7.0-12.fc16:
* should fix your issue,
* was pushed to the Fedora 16 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing wicd-1.7.0-12.fc16'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2012-4962/wicd-1.7.0-12.fc16
then log in and leave karma (feedback).

Comment 5 Fedora Update System 2012-04-11 16:53:43 UTC
wicd-1.7.0-12.fc16 has been pushed to the Fedora 16 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 6 Daniel Walsh 2012-04-22 11:45:21 UTC
*** Bug 809736 has been marked as a duplicate of this bug. ***


Note You need to log in before you can comment on or make changes to this bug.