Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-123612

Evolution crashes when started by users confined by SELinux user type

Linking RHIVOS CVEs to...Migration: Automation ...RHELPRIO AssignedTeam ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • rhel-security-selinux
    • 3
    • False
    • False
    • Hide

      None

      Show
      None
    • No
    • None
    • None
    • None
    • Unspecified Release Note Type - Unknown
    • Unspecified
    • Unspecified
    • Unspecified
    • None

      What were you trying to do that didn't work?

      In a graphical login with SELinux enforcing, users confined to `staff_u` or `user_u` are unable to launch the Evolution application.

      What is the impact of this issue to you?

      Users cannot launch email application

      Please provide the package NVR for which the bug is seen:

      38.1.53-5.el9_6

      How reproducible is this bug?: 100%

      Steps to reproduce

      1. Install the GUI and the Evolution mail package.
      2. Confine a user to the `user_t` or `staff_t` user context.
      3. Set SELinux to enforcing mode.
      4. Attempt to launch Evolution.

      Expected results

      Evolution starts normally.

      Actual results

      The following errors are seen:

      (code:bash}
      (evolution:37613): dbind-WARNING **: 12:57:49.266: AT-SPI: Error retrieving accessibility bus address: org.freedesktop.DBus.Error.NameHasNoOwner: Could not activate remote peer.

      (evolution-alarm-notify:37632): dbind-WARNING **: 12:57:50.593: AT-SPI: Error retrieving accessibility bus address: org.freedesktop.DBus.Error.NameHasNoOwner: Could not activate remote peer.
      Can't find a11y bus: GDBus.Error:org.freedesktop.DBus.Error.NameHasNoOwner: Could not activate remote peer.
      bwrap: Failed to make / slave: Permission denied

        • (evolution:37613): ERROR **: 12:57:50.658: Failed to fully launch dbus-proxy: Child process exited with code 1
          Trace/breakpoint trap (core dumped)
          
          

              rhn-support-zpytela Zdenek Pytela
              rhn-support-amike Andrew Mike
              Zdenek Pytela Zdenek Pytela
              Milos Malik Milos Malik
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated: