Fedora Linux Errors

[klimpix 0]

Hi,

I’m currently testing AirVPN/Eddie on Fedora 44 with KDE Plasma/Wayland and SELinux enforcing. I have run into two issues that seem Fedora/Linux specific.

The main problem concerns the option “Don’t ask elevation every run.”

If this option is disabled, Eddie works normally: I enter my password once, Network Lock works, and the VPN connection is established without problems.

If I enable “Don’t ask elevation every run”, Eddie installs/uses the persistent systemd elevated helper, but after reboot Network Lock fails and Eddie is unable to connect.

I already added the recommended firewalld setting:

NftablesTableOwner=no

to:

/etc/firewalld/firewalld.conf and restarted firewalld.

SELinux appears to be blocking the persistent elevated helper. Relevant AVC messages include:

avc: denied { rename } for comm="eddie-cli-eleva" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=lnk_file

 

There are also denials involving cleanup of Eddie/systemd-resolved files:

avc: denied { unlink } for comm="eddie-cli-eleva" scontext=system_u:system_r:init_t:s0 tclass=file and nftables is denied access to the Network Lock backup file:

avc: denied { getattr } for comm="nft" path="/var/lib/eddie-vpn/state/netlock_nftables_backup.nft" scontext=system_u:system_r:iptables_t:s0 tclass=file

 

The Eddie state directory currently has root-only permissions:

/var/lib/eddie-vpn/state drwx------ root root

 

The visible Eddie error is essentially:

Could not open file: /var/lib/eddie-vpn/state/netlock_nftables_backup.nft Permission denied

I also tested the experimental Eddie 2.27 branch/version, but the behavior was unchanged.

As soon as I disable “Don’t ask elevation every run” again and use the normal password elevation method, the VPN and Network Lock work correctly. This makes it look like the persistent systemd helper does not currently integrate correctly with Fedora’s SELinux policy.

There is also a separate issue with KDE/Plasma: Eddie's icon in the taskbar does not work as expected. The “Minimize to the system tray” option is enabled in Eddie's settings, but when minimized, Eddie remains in the taskbar and does not minimize to the system tray.

My environment:

Fedora 44 KDE Plasma / Wayland SELinux: Enforcing firewalld: enabled NftablesTableOwner=no

I have intentionally omitted account information, VPN server names, IP addresses, hostnames and other identifying information. I can provide additional sanitized logs if needed.

Thanks

[Tech Jedi Alex 1574]

11 hours ago, klimpix said:

I can provide additional sanitized logs if needed.

Please do that, for completeness' sake. Close and reopen Eddie in a state which causes the error and try a connection once, then provide a system report:.