Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 294992 - net-misc/networkmanager's dbus policy does not allow NM VPN connections
Summary: net-misc/networkmanager's dbus policy does not allow NM VPN connections
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Steev Klimaszewski (RETIRED)
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2009-11-28 17:05 UTC by Daniel Gryniewicz (RETIRED)
Modified: 2010-07-01 13:59 UTC (History)
4 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Daniel Gryniewicz (RETIRED) gentoo-dev 2009-11-28 17:05:33 UTC
To start a VPN connection, the user needs access to the VPN.Plugin interface on NM.  The following section needs to be added:

                <allow send_destination="org.freedesktop.NetworkManager"
                     send_interface="org.freedesktop.NetworkManager.VPN.Plugin"/>

I added it to at_console, and it worked for me.
Comment 1 Thomas Capricelli 2010-02-24 13:17:31 UTC
Can you provide more details ? i have the same problem, but i dont really understand what needs to be done.I need to add this line to /etc/dbus-1/system.d/nm-openvpn-service.conf ? somewhere else ? where in the file ? There is no "at_console" for me in this file.

(Using net-misc/networkmanager-openvpn-0.7.2)
Comment 2 Daniel Gryniewicz (RETIRED) gentoo-dev 2010-03-02 16:33:27 UTC
No, it's /etc/dbus-1/system.d/NetworkManager.conf

There should be a section like this:

        <policy at_console="true">
that contains:
                <allow send_destination="org.freedesktop.NetworkManager"
                       send_interface="org.freedesktop.NetworkManager.VPN.Connection"/>

Add a section exactly like that, but with Connection changed to Plugin
Comment 3 Steev Klimaszewski (RETIRED) gentoo-dev 2010-03-30 15:21:37 UTC
I just mentioned this on IRC - dang, feel free to fix this, I'm not near a CVS checkout and I won't have free time after work to look at this until tomorrow.
Comment 4 Daniel Gryniewicz (RETIRED) gentoo-dev 2010-03-30 15:38:26 UTC
Fixed in 0.8-r1.
Comment 5 Laca 2010-07-01 13:59:05 UTC
So, after some upgrade the vpn options are "grey" again and when I select edit for an old one it says I don't have the proper plugins installed. My dbus conf looks like this

brutal VPN # cat /etc/dbus-1/system.d/NetworkManager.conf
<!DOCTYPE busconfig PUBLIC
 "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
 "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig>
        <policy user="root">
                <allow own="org.freedesktop.NetworkManager"/>
                <allow own="org.freedesktop.NetworkManagerSystemSettings"/>

                <allow send_destination="org.freedesktop.NetworkManager"/>
                <allow send_destination="org.freedesktop.NetworkManagerSystemSettings"/>

                <allow send_destination="org.freedesktop.NetworkManager"
                       send_interface="org.freedesktop.NetworkManager.PPP"/>
        </policy>
        <policy at_console="true">
                <allow send_destination="org.freedesktop.NetworkManager"/>

                <allow send_destination="org.freedesktop.NetworkManager"
                       send_interface="org.freedesktop.DBus.Introspectable"/>

                <allow send_destination="org.freedesktop.NetworkManager"
                       send_interface="org.freedesktop.DBus.Properties"/>

                <allow send_destination="org.freedesktop.NetworkManager"
                       send_interface="org.freedesktop.NetworkManager"/>

                <allow send_destination="org.freedesktop.NetworkManager"
                       send_interface="org.freedesktop.NetworkManager.AccessPoint"/>

                <allow send_destination="org.freedesktop.NetworkManager"
                       send_interface="org.freedesktop.NetworkManager.Connection.Active"/>

                <allow send_destination="org.freedesktop.NetworkManager"
                       send_interface="org.freedesktop.NetworkManager.Device.Cdma"/>

                <allow send_destination="org.freedesktop.NetworkManager"
                       send_interface="org.freedesktop.NetworkManager.Device.Wired"/>

                <allow send_destination="org.freedesktop.NetworkManager"
                       send_interface="org.freedesktop.NetworkManager.Device.Gsm"/>

                <allow send_destination="org.freedesktop.NetworkManager"
                       send_interface="org.freedesktop.NetworkManager.Device.Serial"/>

                <allow send_destination="org.freedesktop.NetworkManager"
                       send_interface="org.freedesktop.NetworkManager.Device.Wireless"/>

                <allow send_destination="org.freedesktop.NetworkManager"
                       send_interface="org.freedesktop.NetworkManager.Device"/>

                <allow send_destination="org.freedesktop.NetworkManager"
                       send_interface="org.freedesktop.NetworkManager.DHCP4Config"/>

                <allow send_destination="org.freedesktop.NetworkManager"
                       send_interface="org.freedesktop.NetworkManager.IP4Config"/>

                <allow send_destination="org.freedesktop.NetworkManager"
                       send_interface="org.freedesktop.NetworkManager.VPN.Connection"/>

                <allow send_destination="org.freedesktop.NetworkManager"
                       send_interface="org.freedesktop.NetworkManager.VPN.Plugin"/>
        </policy>
        <policy group="plugdev">
                <allow send_destination="org.freedesktop.NetworkManager"/>

                <deny send_destination="org.freedesktop.NetworkManager"
                      send_interface="org.freedesktop.NetworkManager.PPP"/>
        </policy>
        <policy context="default">
                <deny own="org.freedesktop.NetworkManager"/>
                <deny own="org.freedesktop.NetworkManagerSystemSettings"/>

                <deny send_destination="org.freedesktop.NetworkManager"/>
                <allow send_destination="org.freedesktop.NetworkManagerSystemSettings"/>

                <!-- The org.freedesktop.NetworkManagerSettings.Connection.Secrets
                     interface is secured via PolicyKit.
                  -->
        </policy>

        <limit name="max_replies_per_connection">512</limit>
</busconfig>


[I] net-misc/cnetworkmanager
     Available versions:  (~)0.21-r1 (~)0.21.1
     Installed versions:  0.21.1(18.53.20 2010-06-25)
     Homepage:            http://vidner.net/martin/software/cnetworkmanager/
     Description:         Command line interface for NetworkManager.

[I] net-misc/networkmanager
     Available versions:  0.6.6 (~)0.7.1-r3 0.7.1-r6 (~)0.7.1_p20090824 0.7.2 (~)0.8 (~)0.8-r1 {avahi bluetooth connection-sharing crypt debug dhclient dhcpcd doc gnome gnutls nss resolvconf}                                                                                                         
     Installed versions:  0.8-r1(18.52.16 2010-06-25)(avahi gnutls resolvconf -bluetooth -connection-sharing -dhclient -dhcpcd -doc -nss)
     Homepage:            http://www.gnome.org/projects/NetworkManager/
     Description:         Network configuration and management in an easy way. Desktop environment independent.

[I] net-misc/networkmanager-openvpn
     Available versions:  (~)0.3.2_p20070621 (~)0.7.1-r1 (~)0.7.2 [M](~)0.7.999!t (~)0.8!t {crypt debug doc gnome}
     Installed versions:  0.8!t(20.45.32 2010-06-25)(-gnome)
     Homepage:            http://www.gnome.org/projects/NetworkManager/
     Description:         NetworkManager OpenVPN plugin.

[I] net-misc/networkmanager-pptp
     Available versions:  (~)0.1.0_p20070726 (~)0.7.1 (~)0.7.2 [M](~)0.7.999 (~)0.8 {crypt debug doc gnome test}
     Installed versions:  0.8(20.45.46 2010-06-25)(-gnome -test)
     Homepage:            http://www.gnome.org/projects/NetworkManager/
     Description:         NetworkManager PPTP plugin

[I] net-misc/networkmanager-vpnc
     Available versions:  (~)0.6.4_p20070621 (~)0.7.1 (~)0.7.2 [M](~)0.7.999!t (~)0.8!t {crypt debug doc gnome}
     Installed versions:  0.8!t(20.45.57 2010-06-25)(-gnome)
     Homepage:            http://www.gnome.org/projects/NetworkManager/
     Description:         NetworkManager VPNC plugin