Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 269404 - net-misc/wicd-1.6.0_alpha3: D-Bus permission errors keep client from starting
Summary: net-misc/wicd-1.6.0_alpha3: D-Bus permission errors keep client from starting
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Jeremy Olexa (darkside) (RETIRED)
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2009-05-11 13:28 UTC by Tony Vroon (RETIRED)
Modified: 2009-05-28 13:19 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments
hal.conf (hal.conf,4.80 KB, text/plain)
2009-05-11 18:26 UTC, Tony Vroon (RETIRED)
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Tony Vroon (RETIRED) gentoo-dev 2009-05-11 13:28:25 UTC
chainsaw@amalthea ~ $ wicd-client 
Has notifications support True
Loading...
Connecting to daemon...
Connected.
ERROR:dbus.proxies:Introspect error on :1.9:/org/wicd/daemon: dbus.exceptions.DBusException: org.freedesktop.DBus.Error.AccessDenied: Rejected send message, 1 matched rules; type="method_call", sender=":1.115" (uid=1000 pid=20866 comm="python -O /usr/lib/wicd/wicd-client.py ") interface="org.freedesktop.DBus.Introspectable" member="Introspect" error name="(unset)" requested_reply=0 destination=":1.9" (uid=0 pid=3721 comm="python -O /usr/lib/wicd/wicd-daemon.py "))
warning: ignoring exception org.freedesktop.DBus.Error.AccessDenied: Rejected send message, 1 matched rules; type="method_call", sender=":1.115" (uid=1000 pid=20866 comm="python -O /usr/lib/wicd/wicd-client.py ") interface="org.wicd.daemon" member="GetConnectionStatus" error name="(unset)" requested_reply=0 destination=":1.9" (uid=0 pid=3721 comm="python -O /usr/lib/wicd/wicd-daemon.py "))
warning: ignoring exception org.freedesktop.DBus.Error.AccessDenied: Rejected send message, 1 matched rules; type="method_call", sender=":1.115" (uid=1000 pid=20866 comm="python -O /usr/lib/wicd/wicd-client.py ") interface="org.wicd.daemon" member="GetNeedWiredProfileChooser" error name="(unset)" requested_reply=0 destination=":1.9" (uid=0 pid=3721 comm="python -O /usr/lib/wicd/wicd-daemon.py "))
Error in atexit._run_exitfuncs:
Traceback (most recent call last):
  File "/usr/lib64/python2.6/atexit.py", line 24, in _run_exitfuncs
    func(*targs, **kargs)
  File "/usr/lib/wicd/wicd-client.py", line 754, in on_exit
    except dbusmanager.DBusException:
AttributeError: 'module' object has no attribute 'DBusException'
Error in sys.exitfunc:
Traceback (most recent call last):
  File "/usr/lib64/python2.6/atexit.py", line 24, in _run_exitfuncs
    func(*targs, **kargs)
  File "/usr/lib/wicd/wicd-client.py", line 754, in on_exit
    except dbusmanager.DBusException:
AttributeError: 'module' object has no attribute 'DBusException'

[ebuild   R   ] sys-apps/dbus-1.2.12  USE="X -debug -doc (-selinux) -test" 0 kB
[ebuild   R   ] net-misc/wicd-1.6.0_alpha3  USE="libnotify -ioctl" 0 kB

amalthea ~ # emerge --info
Portage 2.1.6.13 (default/linux/amd64/2008.0/no-multilib, gcc-4.3.3, glibc-2.9_p20081201-r2, 2.6.30-rc4-00187-gb4348f3 x86_64)
=================================================================
System uname: Linux-2.6.30-rc4-00187-gb4348f3-x86_64-Intel-R-_Core-TM-2_Duo_CPU_T9400_@_2.53GHz-with-gentoo-2.0.0
Timestamp of tree: Unknown
app-shells/bash:     4.0_p17-r1
dev-java/java-config: 1.3.7-r1, 2.1.7
dev-lang/python:     2.4.4-r6, 2.5.4-r2, 2.6.2
dev-python/pycrypto: 2.0.1-r8
dev-util/cmake:      2.6.4
sys-apps/baselayout: 2.0.0
sys-apps/openrc:     0.4.3-r2
sys-apps/sandbox:    1.9
sys-devel/autoconf:  2.13, 2.63-r1
sys-devel/automake:  1.5, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10.2
sys-devel/binutils:  2.19.1-r1
sys-devel/gcc-config: 1.4.1
sys-devel/libtool:   2.2.6a
virtual/os-headers:  2.6.28-r1
ACCEPT_KEYWORDS="amd64 ~amd64"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-O2 -march=core2 -mcx16 -msahf --param l1-cache-size=32 --param l1-cache-line-size=64 -mtune=core2 -pipe"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /var/lib/hsqldb"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/splash /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c /etc/udev/rules.d"
CXXFLAGS="-O2 -march=core2 -mcx16 -msahf --param l1-cache-size=32 --param l1-cache-line-size=64 -mtune=core2 -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="distlocks fixpackages parallel-fetch protect-owned sandbox sfperms sign strict unmerge-orphans userfetch"
GENTOO_MIRRORS="http://gentoo.virginmedia.com"
LANG="en_GB.UTF-8"
LC_ALL="en_GB.UTF-8"
LDFLAGS="-Wl,--as-needed"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/cvs/gentoo-x86"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="cvs://chainsaw@cvs.gentoo.org:/var/cvsroot"
USE="16bit 16bit-indices 7zip S3TC X X509 a52 aac aalib ace acpi adns adplug alac alsa amd64 amr amrnb amrwb animgif aotuv archive aspell async asyncns audacious audiofile avahi bash-completion berkdb binary-drivers binfilter bluetooth bonjour bzip2 cairo calendar cardbus cdaudio cdda cddb cdparanoia cdr cdrom chardet chipcard chm cleartype cli consolekit cpio cracklib crypt css cups curl dbus device-mapper dhcp dhcpcd dirac disk-partition diskio divx djvu dmi dri drm dts dv dvd dvdr dvi ecc elf enca encode epiphany erandom exif exiv2 expat fam fat fbcon fbcondecor ffmpeg fftw flac fortran ftp fuse g15 gconf gd gdbm gdl gdm gedit gif gimp glib glitz glut gmedia gnutls gpg gphoto2 gs gsm gstreamer gtk gzip hal hddtemp hdri hfs howl-compat hpn ical icons iconv id3 id3tag idle idn ieee1394 imagemagick imap imlib inkjar inotify ipod ipv6 irda isdnlog jabber java jbig jce john jpeg jpeg2k juju keyring lame laptop lcms ldap libburn libcaca libgcrypt libnotify libsamplerate libsexy libssh2 libwww lilo logrotate lzma lzo mad magic md5sum mdnsresponder-compat midi mikmod mime mjpeg mmap mmx mmxext mng modplug moonlight mp2 mp3 mp4 mpeg mplayer mudflap musepack music nano-syntax nautilus ncurses nemesi neon network-cron nls nptl nptlonly nsplugin nss nuv nvidia ogg opengl openmp openssl otr ots pam pango pccts pcmcia pcre pdf perl physfs pidgin plotutils png pnm policykit posix postscript ppds pppd pulseaudio python rar rdesktop readline reflection replytolist rss rtc samba scenarios schroedinger screenshot scrobbler sdl session sftp shorten sid smartcard smp sms sndfile snmp soup sourceview sox span speex spell spl sqlite srt srv sse sse2 sse3 ssl ssse3 startup-notification subtitles svg svgz sysfs syslog szip t1lib taglib tagwriting tcpd theora thesaurus threads tiff timidity tk tls tordns totem tracker trayicon truetype tta twolame unicode urandom usb v4l2 vcd vnc vorbis vorbis-psy vte wav wavpack webkit wifi wma wmf wmp xcb xcomposite xface xhtml xinerama xml xmp xorg xpm xscreensaver xsettings xslt xulrunner xv xvid xvmc yv12 zeroconf zlib" ALSA_CARDS="hda-intel" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="keyboard mouse evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" USERLAND="GNU" VIDEO_CARDS="intel"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, FFLAGS, INSTALL_MASK, LINGUAS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
Comment 1 Jeremy Olexa (darkside) (RETIRED) archtester gentoo-dev Security 2009-05-11 18:09:08 UTC
Upstream has requested to see the "/etc/dbus-1/system.d/hal.conf" file.

thx
Comment 2 Tony Vroon (RETIRED) gentoo-dev 2009-05-11 18:26:43 UTC
Created attachment 190962 [details]
hal.conf
Comment 3 Jeremy Olexa (darkside) (RETIRED) archtester gentoo-dev Security 2009-05-12 05:13:07 UTC
Time to get (current)hal maintainer involved. I know *very* little about hal and how it works.

Here is the relevant upstream discussion wrt this bug report:

13:38 < rworkman> darkside_: is Tony the hal maintainer?  I think (though I'm 
                  not certain) that your policies are too lenient.
13:39 < rworkman> looks like the "default" context allows everything, and thus 
                  your plugdev status is irrelevant.
13:40 < rworkman> Of course, that means I have no idea what's wrong in that 
                  particular bug report.
13:53 < rworkman> I think this is closer to what you want: 
                  http://slackware.com/~rworkman/hal.conf.txt
13:54 < rworkman> As a test, try removing your account from the plugdev group, 
                  logout, reload the messagebus service, and log back in -- 
                  then see if automounting still works.  If it does, then your 
                  policies are too permissive.
13:59 < darkside_> ok, i'll check. thx

I guess this could very well be related to bug 268727 ??
Comment 4 Daniel Gryniewicz (RETIRED) gentoo-dev 2009-05-12 13:18:23 UTC
Okay, I'm confused.  What do those errors have to do with hal?  They're errors accessing the wicd dbus nodes (org.wicd.daemon" member="GetConnectionStatus") not the hal nodes.

Gentoo recenly added dbus 1.2.12, which has a default deny policy.  Everything that installs dbus policy needs to add allow for everything that needs access, with appropriate policy.  I suspect wicd needs to do this, but I don't use it, so I don't know.
Comment 5 Jeremy Olexa (darkside) (RETIRED) archtester gentoo-dev Security 2009-05-28 03:46:05 UTC
Thanks Dan for clearing that up.

Thanks Tony for reporting.

To anyone else that may see this. wicd allows the GUI to only run if you are in the users group. This is moderately configurable at build time but it is tailored to other distros that have a netdev group by default. I added a warning to the beta3 ebuild that says:

 * Wicd-1.6 and newer requires your user to be in the 'users' group. If
 * you are not in that group, then modify /etc/dbus-1/system.d/wicd.conf
 * 
Comment 6 Daniel Gryniewicz (RETIRED) gentoo-dev 2009-05-28 13:19:42 UTC
Maybe you want to use plugdev for this, like hal, networkmanager, and a few other things do?  That seems vaguely less confusing.