[PATCH v1] obexctl: Add sepolicy for obexctl to work in ssh
Amisha Jain <[email protected]> Fri, 16 Jan 2026 19:29:12 +0530
| Newsgroups | org.kernel.vger.selinux-refpolicy |
|---|---|
| Message-ID | <[email protected]> |
This fix is required to resolve below AVC denial -
audit[635]: USER_AVC pid=635 uid=999 auid=4294967295 ses=4294967295
subj=system_u:system_r:system_dbusd_t:s0 msg='avc: denied { send_msg }
for msgtype=method_return dest=:1.47 spid=763 tpid=1862
scontext=system_u:system_r:initrc_t:s0
tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
tclass=dbus permissive=0 exe="/usr/bin/dbus-daemon" sauid=999
hostname=? addr=? terminal=?'
---
policy/modules/services/obex.fc | 1 +
policy/modules/services/obex.te | 2 ++
2 files changed, 3 insertions(+)
diff --git a/policy/modules/services/obex.fc b/policy/modules/services/obex.fc
index 03fa56040..dcbefa2c1 100644
--- a/policy/modules/services/obex.fc
+++ b/policy/modules/services/obex.fc
@@ -1 +1,2 @@
/usr/bin/obex-data-server -- gen_context(system_u:object_r:obex_exec_t,s0)
+/usr/libexec/bluetooth/obexd -- gen_context(system_u:object_r:obex_exec_t,s0)
diff --git a/policy/modules/services/obex.te b/policy/modules/services/obex.te
index 5e2f20578..176050056 100644
--- a/policy/modules/services/obex.te
+++ b/policy/modules/services/obex.te
@@ -30,6 +30,8 @@ miscfiles_read_localization(obex_t)
userdom_search_user_home_content(obex_t)
+unconfined_dbus_send(obex_t)
+
optional_policy(`
bluetooth_use(obex_t)
')
--
2.34.1