Bug 802184 - extensions.gnome.org is blocked by policy
Summary: extensions.gnome.org is blocked by policy
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy
Version: 17
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Miroslav Grepl
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2012-03-11 23:05 UTC by Giovanni Campagna
Modified: 2012-03-25 23:10 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2012-03-25 23:10:27 UTC
Type: ---
Embargoed:

Attachments (Terms of Use)

Description Giovanni Campagna 2012-03-11 23:05:02 UTC 
Description of problem:
extensions.gnome.org (the website hosting gnome-shell extensions) uses a Firefox plugin that makes DBus calls to enumerate and install extensions. These calls are blocked by SELinux, making the website inusable.

Version-Release number of selected component (if applicable):
selinux-policy-3.10.0-95.fc17.noarch

How reproducible:
Always

Steps to Reproduce:
1. Go to https://extensions.gnome.org with Firefox
  
Actual results:
GnomeShellBrowserPlugin-WARNING **: Failed to retrieve extension metadata: GDBus.Error:org.freedesktop.DBus.Error.AccessDenied: An SELinux policy prevents this sender from sending this message to this recipient, 0 matched rules; type="method_call", sender=":1.92" (uid=1000 pid=1262 comm="/usr/lib64/xulrunner-2/plugin-container /usr/lib64") interface="org.gnome.Shell" member="GetExtensionInfo" error name="(unset)" requested_reply="0" destination=":1.41" (uid=1000 pid=973 comm="/usr/bin/gnome-shell ")

Expected results:
The website loads gnome-shell configuration (version, installed extensions) with no error.
Comment 1 Miroslav Grepl 2012-03-12 07:54:47 UTC 
What AVC are you getting?

$ ausearch -m avc,user_avc
Comment 2 Giovanni Campagna 2012-03-25 23:10:27 UTC 
Whatever it was, it's fixed with the latest updates of firefox, gnome-shell and selinux-policy, so closing.
Note You need to log in before you can comment on or make changes to this bug.