SELinux is preventing gnome-shell from connectto access on the unix_stream_socket /tmp/dbus-(changing value)

Ask Fedora Ask in English
,
1

I installed the “Mate Compiz (Testing)” Spin while updating to F34. I prefered the GDM Login manager and installed it. Apparently gdm works just whth gnome-shell.

Me too today:

SELinux is preventing gnome-shell from connectto access on the unix_stream_socket /tmp/dbus-UpA49W7ZOx.

*****  Plugin catchall (100. confidence) suggests   **************************

If you believe that gnome-shell should be allowed connectto access on the dbus-UpA49W7ZOx unix_stream_socket by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# ausearch -c 'gnome-shell' --raw | audit2allow -M my-gnomeshell
# semodule -X 300 -i my-gnomeshell.pp

Additional Information:
Source Context                system_u:system_r:xdm_t:s0-s0:c0.c1023
Target Context                system_u:system_r:unconfined_service_t:s0-s0:c0.c1
                              023
Target Objects                /tmp/dbus-UpA49W7ZOx [ unix_stream_socket ]
Source                        gnome-shell
Source Path                   gnome-shell
Port                          <Unknown>
Host                          fedylu
Source RPM Packages           
Target RPM Packages
1 Like
2

https://discussion.fedoraproject.org/t/selinux-is-preventing-gnome-shell-from-write-access-on-the-sock-file-dbus-xodxlwour5/71879/5?u=ilikelinux

@ankursinha do you want to move the answer from swefredde that we can remove it on the other topic?

1 Like
3

Name of unix_stream_socket changes by every boot.

2 Likes
4

Yes, I realized that after my post. Maybe you have to rely on the developers after all. The process that creates the file might need to be tweaked to create it with a suitable file context.

1 Like
5

Sure—does that only apply to this selinux warning though, or also to the other one there? If it applies to both, it’ll be better to copy the relevant bits here in a new comment?