RE: OpenOffice now automagically works: One last question...

[Therese Trudeau <mswotr@xxxxxxxxxxx>]

>> I tried re enabling SELinux and OO won't start, so I assume that
>> I must have SE Linux disabled in order for OpenOffice to run - is
>> this correct?
>> 
>> if correct, is there a way I can still keep my system secure and
>> run OpenOffice 2.3?
> 
> You do not have to keep selinux disabled. You can re-enable it;
> however, you may get a couple selinux failures. This is what
> happens on my system when running in Enforcing mode.
> 
> 1. Selinux complains about a memory access
> by /opt/openoffice.org2.3/program/libvclplug_gen680li.so.1.1
> 
> 2. Selinux complains about openoffice attempting to change the
> memory access protection on the heap.
> 
> To solve number 1. on my system:
> sudo chcon -t
> textrel_shlib_t /opt/openoffice.org2.3/program/libvclplug_gen680li.so.1.1
> 
> Please mind the line wrapping. To solve issue 2. on my system:
> sudo setsebool -P allow_execheap=1
> 
> I am not entirely sure that it is wise to perform the second step,
> as it affects all applications that run on the system. So it seems
> a bit of a sledgehammer.
> 
> To view what selinux is complaining about you may want to install
> the setroubleshoot package from yum and view what it is complaining
> about exactly. It will also give you suggestions on how to fix the
> selinux complaints.

OK Thanks. I'm wondering if a secure alternative would be to run SELinux in permissive mode instead of disabled? 


_________________________________________________________________
Connect and share in new ways with Windows Live.
http://www.windowslive.com/share.html?ocid=TXT_TAGHM_Wave2_sharelife_012008_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos