[Pkg-bluetooth-maintainers] Bug#463991: /usr/sbin/hcid: hcid doesn't work when SELinux is enabled

[Ritesh Raj Sarraf]

Package: bluez-utils
Version: 3.24-1
Severity: important
File: /usr/sbin/hcid

When SELinux is enabled, hcid doesn't work.

type=AVC msg=audit(1201966767.693:24): avc:  denied  { net_bind_service } for  pid=4152 comm="hcid" capability=10 scontext=system_u:system_r:bluetooth_t:s0 tcontext=system_u:system_r:bluetooth_t:s0 tclass=capability
        Was caused by:
                Unknown - would be allowed by specified policy
                Possible mismatch between this policy and the one under which the audit message was generated.
                Possible mismatch between current in-memory boolean settings vs. permanent ones.

Ritesh

-- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (990, 'testing'), (600, 'unstable'), (150, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.23-systap (SMP w/2 CPU cores; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages bluez-utils depends on:
ii  dbus                         1.1.2-1     simple interprocess messaging syst
ii  libbluetooth2                3.24-1      Library to use the BlueZ Linux Blu
ii  libc6                        2.7-6       GNU C Library: Shared libraries
ii  libdbus-1-3                  1.1.2-1     simple interprocess messaging syst
ii  libglib2.0-0                 2.14.5-2    The GLib library of C routines
ii  libusb-0.1-4                 2:0.1.12-9  userspace USB programming library
ii  lsb-base                     3.1-24      Linux Standard Base 3.1 init scrip
ii  makedev                      2.3.1-84    creates device files in /dev
ii  module-init-tools            3.3-pre11-4 tools for managing Linux kernel mo
ii  udev                         0.114-2     /dev/ and hotplug management daemo

Versions of packages bluez-utils recommends:
pn  bluez-audio                   <none>     (no description available)
pn  bluez-gnome                   <none>     (no description available)

-- no debconf information