mozilla not starting in enforcing mode

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



After the most recent update to the strict policy (selinux-policy-strict-1.13.7-1), Mozilla web browser will not start in enforcing mode. It does *not* produce *any* avc denied messages in enforcing mode. Below are the avc denied messages that are produced when it does start in permissive mode:

Jun 20 20:31:30 new2 kernel: audit(1087777890.697:0): avc: denied { write } for pid=3471 exe=/usr/lib/mozilla-1.6/mozilla-xremote-client name=X0 dev=hda2 ino=1840568 scontext=richard:staff_r:staff_mozilla_t tcontext=system_u:object_r:xdm_tmp_t tclass=sock_file
Jun 20 20:31:34 new2 kernel: audit(1087777894.263:0): avc: denied { unlink } for pid=3457 exe=/usr/lib/mozilla-1.6/mozilla-bin name=.fonts.cache-1 dev=hda2 ino=1091707 scontext=richard:staff_r:staff_mozilla_t tcontext=richard:object_r:staff_home_t tclass=file


Here is part of the output from fixfiles relabel prior to testing this problem :

/usr/sbin/setfiles: read 1499 specifications
/usr/sbin/setfiles: labeling files under /
/usr/sbin/setfiles: relabeling /home/richard/.fonts.cache-1 from richard:object_r:staff_mozilla_rw_t to richard:object_r:staff_home_t
/usr/sbin/setfiles: relabeling /.autofsck from system_u:object_r:root_t to system_u:object_r:default_t
/usr/sbin/setfiles: hash table stats: 374956 elements, 62564/65536 buckets used, longest chain length 15


HTH
Richard Hally


[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux