Hi. I cant get tomboy to work on my debian squeeze box. I've started to use it a lot on my laptop so really need it on here as well. I installed with aptitude, and tried to run it. Didn't work - I had SELinux still activated, silly me. So I did what I usually do, turned SEL to permissive, rebooted, and tried to open again. Still didn't work, although I am getting an SEL-related error message -
Code:
spoovy@dandelion:~$ tomboy
Unhandled Exception: GLib.GException: Failed to contact configuration server; some possible causes are that you need to enable TCP/IP networking for ORBit, or you have stale NFS locks due to a system crash. See http://projects.gnome.org/gconf/ for information. (Details — 1: Failed to get connection to session: An SELinux policy prevents this sender from sending this message to this recipient (rejected message had sender "(unset)" interface "org.freedesktop.DBus" member "Hello" error name "(unset)" destination "org.freedesktop.DBus"))
at GConf.Client.GetConnections (System.String dir) [0x00000]
at GConf.Client.AddNotify (System.String dir, GConf.NotifyEventHandler notify) [0x00000]
at Tomboy.GConfPreferencesClient.AddNotify (System.String dir, Tomboy.NotifyEventHandler notify) [0x00000]
at Tomboy.Preferences.get_Client () [0x00000]
at Tomboy.Preferences.Get (System.String key) [0x00000]
at Tomboy.TomboyTray.MakeTrayNotesMenu () [0x00000]
at Tomboy.TomboyTray..ctor (Tomboy.NoteManager manager) [0x00000]
at Tomboy.TomboyTray..ctor (Tomboy.NoteManager manager, ITomboyTray tray) [0x00000]
at Tomboy.TomboyTrayIcon..ctor (Tomboy.NoteManager manager) [0x00000]
at Tomboy.Tomboy.StartTrayIcon () [0x00000]
at Tomboy.Tomboy.Main (System.String[] args) [0x00000]
So I tried to create my SEL module as I normally would -
Code:
spoovy@dandelion:~$ sudo audit2allow -l -a -M seltomboy
/sbin/audispd permissions should be 0750
******************** IMPORTANT ***********************
To make this policy package active, execute:
semodule -i seltomboy.pp
spoovy@dandelion:~$ sudo semodule -i seltomboy.pp
libsepol.check_assertion_helper: neverallow violated by allow system_dbusd_t fixed_disk_device_t:blk_file { read };
libsemanage.semanage_expand_sandbox: Expand module failed
semodule: Failed!
spoovy@dandelion:~$ chmod 0750 /sbin/audispd
chmod: changing permissions of `/sbin/audispd': Operation not permitted
spoovy@dandelion:~$ sudo chmod 0750 /sbin/audispd
spoovy@dandelion:~$ sudo semodule -i seltomboy.pp
libsepol.check_assertion_helper: neverallow violated by allow system_dbusd_t fixed_disk_device_t:blk_file { read };
libsemanage.semanage_expand_sandbox: Expand module failed
semodule: Failed!
spoovy@dandelion:~$ sudo getenforce
Permissive
spoovy@dandelion:~$
As you can see I checked that SEL is permissive, and it is. So I don't understand this at all. Anyone got any ideas?
Thanks in advance
spoov
edit
I changed file permissions of /sbin/audispd as suggested, and tried the whole thing as root. Still the same result -
Code:
root@dandelion:~# tomboy
Unhandled Exception: GLib.GException: Failed to contact configuration server; some possible causes are that you need to enable TCP/IP networking for ORBit, or you have stale NFS locks due to a system crash. See http://projects.gnome.org/gconf/ for information. (Details — 1: Failed to get connection to session: An SELinux policy prevents this sender from sending this message to this recipient (rejected message had sender "(unset)" interface "org.freedesktop.DBus" member "Hello" error name "(unset)" destination "org.freedesktop.DBus"))
at GConf.Client.GetConnections (System.String dir) [0x00000]
at GConf.Client.AddNotify (System.String dir, GConf.NotifyEventHandler notify) [0x00000]
at Tomboy.GConfPreferencesClient.AddNotify (System.String dir, Tomboy.NotifyEventHandler notify) [0x00000]
at Tomboy.Preferences.get_Client () [0x00000]
at Tomboy.Preferences.Get (System.String key) [0x00000]
at Tomboy.TomboyTray.MakeTrayNotesMenu () [0x00000]
at Tomboy.TomboyTray..ctor (Tomboy.NoteManager manager) [0x00000]
at Tomboy.TomboyTray..ctor (Tomboy.NoteManager manager, ITomboyTray tray) [0x00000]
at Tomboy.TomboyTrayIcon..ctor (Tomboy.NoteManager manager) [0x00000]
at Tomboy.Tomboy.StartTrayIcon () [0x00000]
at Tomboy.Tomboy.Main (System.String[] args) [0x00000]
root@dandelion:~# audit2allow -l -a -M seltomboy
******************** IMPORTANT ***********************
To make this policy package active, execute:
semodule -i seltomboy.pp
root@dandelion:~# semodule -i seltomboy.pp
libsepol.check_assertion_helper: neverallow violated by allow system_dbusd_t fixed_disk_device_t:blk_file { read };
libsemanage.semanage_expand_sandbox: Expand module failed
semodule: Failed!
root@dandelion:~#