Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

allow gdm and iiosensorproxy talk to each other via D-bus #2473

Merged

Conversation

milosmalik
Copy link
Contributor

GDM initiated processes (running as xdm_t) want to call the following D-bus interface, which belongs to the iio-sensor-proxy service, but SELinux denies that action:

  • net.hadess.SensorProxy.ClaimAccelerometer

As a result, the following error message appears in the systemd journal:

gnome-shell[...]: Failed to claim accelerometer: GDBus.Error:org.freedesktop.DBus.Error.AccessDenied: Sender is not authorized to send message

A successful D-bus communication in both directions is needed for proper function of this scenario:

  • xdm_t -> send_msg -> iiosensorproxy_t
  • iiosensorproxy_t -> send_msg -> xdm_t

Resolves: RHEL-70850

GDM initiated processes (running as xdm_t) want to call the following
D-bus interface, which belongs to the iio-sensor-proxy service, but
SELinux denies that action:
 * net.hadess.SensorProxy.ClaimAccelerometer

As a result, the following error message appears in the systemd journal:

  gnome-shell[...]: Failed to claim accelerometer: GDBus.Error:org.freedesktop.DBus.Error.AccessDenied: Sender is not authorized to send message

A successful D-bus communication in both directions is needed for
proper function of this scenario:
 * xdm_t -> send_msg -> iiosensorproxy_t
 * iiosensorproxy_t -> send_msg -> xdm_t

Resolves: RHEL-70850
@zpytela
Copy link
Contributor

zpytela commented Dec 11, 2024

Merging, thank you.

@zpytela zpytela merged commit dd281fa into fedora-selinux:rawhide Dec 11, 2024
3 of 4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants