From: Stephen Smalley <sds@tycho.nsa.gov>
To: Tobias Bengfort <tobias.bengfort@posteo.de>, SELinux@tycho.nsa.gov
Subject: Re: UPower dbus interface unavailable with enforcing SELinux
Date: Tue, 30 Sep 2014 12:39:06 -0400 [thread overview]
Message-ID: <542ADCAA.30001@tycho.nsa.gov> (raw)
In-Reply-To: <m08v7l$tpj$1@ger.gmane.org>
On 09/28/2014 08:33 AM, Tobias Bengfort wrote:
> Hi,
>
> I am running SELinux on my debian wheezy laptop. I would like to be able
> to suspend in a defined amount of time, say 2h. This is useful e.g. when
> watching a movie and falling asleep.
>
> Unfortunately, SELinux blocks access to UPower's dbus interface. I guess
> this is because programmatic access to power control is considered
> dangerous.
>
> My current workaround is to disable SElinux whenever I want to use the
> described feature. This of course is not a desirable solution.
>
> Is what I am trying to do possible or should I just start reading books
> instead of watching movies?
Please post the actual denials that you see in /var/log/messages or
/var/log/audit/audit.log.
prev parent reply other threads:[~2014-09-30 16:39 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-09-28 12:33 UPower dbus interface unavailable with enforcing SELinux Tobias Bengfort
2014-09-30 16:39 ` Stephen Smalley [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=542ADCAA.30001@tycho.nsa.gov \
--to=sds@tycho.nsa.gov \
--cc=SELinux@tycho.nsa.gov \
--cc=tobias.bengfort@posteo.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.