[PATCH] sepolicy: Allow bluetooth to send D-Bus messages to systemd

Wei Deng <[email protected]> Fri, 3 Apr 2026 12:01:20 +0530
Newsgroups org.kernel.vger.selinux-refpolicy
Message-ID <[email protected]>
Add init_dbus_chat() for bluetooth_t to allow bluetoothd to send
D-Bus method_return messages back to systemd (init_t) over the
system bus.

Below avc denial is fixed with this patch:

avc:  denied  { send_msg } for  msgtype=method_return dest=:1.11
scontext=system_u:system_r:bluetooth_t:s0
tcontext=system_u:system_r:init_t:s0 tclass=dbus permissive=0

Signed-off-by: Wei Deng <[email protected]>
---
 policy/modules/services/bluetooth.te | 1 +
 1 file changed, 1 insertion(+)

diff --git a/policy/modules/services/bluetooth.te b/policy/modules/services/bluetooth.te
index ceb42d147..a73cb5db0 100644
--- a/policy/modules/services/bluetooth.te
+++ b/policy/modules/services/bluetooth.te
@@ -136,6 +136,7 @@ userdom_dontaudit_search_user_home_dirs(bluetooth_t)
 optional_policy(`
 	dbus_system_bus_client(bluetooth_t)
 	dbus_connect_system_bus(bluetooth_t)
+  init_dbus_chat(bluetooth_t)
 	init_dbus_send_script(bluetooth_t)
 
 	optional_policy(`
-- 
2.34.1