Re: netmanager problems with ubuntu 8.04

["Darren Albers" <dalbers gmail com>]

On Mon, May 19, 2008 at 9:07 PM, Dan Williams <dcbw redhat com> wrote:
> On Mon, 2008-05-19 at 19:17 -0400, Darren Albers wrote:
>> On Mon, May 19, 2008 at 7:05 PM, Eric S. Johansson <esj harvee org> wrote:
>> > Dan Williams wrote:
>> >> Looks like there might be Debian-style D-Bus permission issues with the
>> >> nm-dhcp.action callout's dbus config files disallowing it from sending
>> >> NetworkManager the returned DHCP configuration.
>> >>
>> >> What's the contents of your /etc/dbus-1/system.d/nm-dhcp-client.conf
>> >> file?
>> >
>> > <!DOCTYPE busconfig PUBLIC
>> >  "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
>> >  "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd";>
>> > <busconfig>
>> >         <policy user="root">
>> >                 <allow own="org.freedesktop.nm_dhcp_client"/>
>> >                <allow send_interface="org.freedesktop.nm_dhcp_client"/>
>> >         </policy>
>> >         <policy context="default">
>> >                 <deny own="org.freedesktop.nm_dhcp_client"/>
>> >                <deny send_interface="org.freedesktop.nm_dhcp_client"/>
>> >         </policy>
>> > </busconfig>
>> > _______________________________________________
>> > NetworkManager-list mailing list
>> > NetworkManager-list gnome org
>> > http://mail.gnome.org/mailman/listinfo/networkmanager-list
>> >
>>
>> In the short-term set the two deny's at the bottom to permit.   It
>> will get DHCP working and maybe Dan or someone can help us figure out
>> what the proper permissions are.
>>
>> So far I have tried allowing console and netdev to own it with no luck.
>
> It just needs permissions to talk to NM, and both should be running as
> root...  what were the permissions debian-based distros used for the old
> dhclient-script when it was sending options to dhcdbd?  That might give
> some clue as to what to do.
>
> dan
>
>

Good point I will check there...   In the short-term a safer solution
might be to leave the default deny and instead give the specific user
ownership.