Hi,
I'm trying to get
ffmpeg working for Gallery2 on FC5, and getting the following error (from the
debug message via Gallery):
Executing: ( "/usr/bin/ffmpeg" "-h" ) 2>/MV/webs/Repository/gallery/tmp/g2dbgitTQYC file_exists(/MV/webs/Repository/gallery/tmp/g2dbgitTQYC) filesize(/MV/webs/Repository/gallery/tmp/g2dbgitTQYC) fopen(/MV/webs/Repository/gallery/tmp/g2dbgitTQYC, r, 0) feof(Resource id #108) fgets(Resource id #108, 4096) feof(Resource id #108) fgets(Resource id #108, 4096) feof(Resource id #108) fclose(Resource id #108) unlink(/MV/webs/Repository/gallery/tmp/g2dbgitTQYC) Regular Output: Error Output: /usr/bin/ffmpeg: error while loading shared libraries: libavcodec.so.51: cannot enable executable stack as shared object requires: Permission denied Status: 127 (expected 0)
A quick look in
/usr/lib reveals:
-rwxr-xr-x
root root
system_u:object_r:textrel_shlib_t /usr/lib/libavcodec-CVS.so
lrwxrwxrwx root root system_u:object_r:lib_t /usr/lib/libavcodec.so -> libavcodec-CVS.so
lrwxrwxrwx root root system_u:object_r:lib_t /usr/lib/libavcodec.so.51 -> libavcodec-CVS.so
lrwxrwxrwx root root system_u:object_r:lib_t /usr/lib/libavcodec.so -> libavcodec-CVS.so
lrwxrwxrwx root root system_u:object_r:lib_t /usr/lib/libavcodec.so.51 -> libavcodec-CVS.so
/var/log/audit/audit.log shows:
type=SYSCALL
msg=audit(1146010953.133:45163): arch=40000003 syscall=125 success=no exit=-13
a0=bfc5b000 a1=1000 a2=1000007 a3=fffff000 items=0 pid=25005 auid=1000 uid=48
gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 comm="ffmpeg"
exe="/usr/bin/ffmpeg"
type=AVC msg=audit(1146010953.141:45164): avc: denied { execstack } for pid=25007 comm="ffmpeg" scontext=user_u:system_r:httpd_sys_script_t:s0 tcontext=user_u:system_r:httpd_sys_script_t:s0 tclass=process
type=SYSCALL msg=audit(1146010953.141:45164): arch=40000003 syscall=125 success=no exit=-13 a0=bf9e8000 a1=1000 a2=1000007 a3=fffff000 items=0 pid=25007 auid=1000 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 comm="ffmpeg" exe="/usr/bin/ffmpeg"
type=AVC msg=audit(1146010953.213:45165): avc: denied { execstack } for pid=25009 comm="ffmpeg" scontext=user_u:system_r:httpd_sys_script_t:s0 tcontext=user_u:system_r:httpd_sys_script_t:s0 tclass=process
type=SYSCALL msg=audit(1146010953.213:45165): arch=40000003 syscall=125 success=no exit=-13 a0=bfbe6000 a1=1000 a2=1000007 a3=fffff000 items=0 pid=25009 auid=1000 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 comm="ffmpeg" exe="/usr/bin/ffmpeg"
type=AVC msg=audit(1146010953.221:45166): avc: denied { execstack } for pid=25011 comm="ffmpeg" scontext=user_u:system_r:httpd_sys_script_t:s0 tcontext=user_u:system_r:httpd_sys_script_t:s0 tclass=process
type=SYSCALL msg=audit(1146010953.221:45166): arch=40000003 syscall=125 success=no exit=-13 a0=bf89b000 a1=1000 a2=1000007 a3=fffff000 items=0 pid=25011 auid=1000 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 comm="ffmpeg" exe="/usr/bin/ffmpeg"
type=AVC msg=audit(1146010953.141:45164): avc: denied { execstack } for pid=25007 comm="ffmpeg" scontext=user_u:system_r:httpd_sys_script_t:s0 tcontext=user_u:system_r:httpd_sys_script_t:s0 tclass=process
type=SYSCALL msg=audit(1146010953.141:45164): arch=40000003 syscall=125 success=no exit=-13 a0=bf9e8000 a1=1000 a2=1000007 a3=fffff000 items=0 pid=25007 auid=1000 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 comm="ffmpeg" exe="/usr/bin/ffmpeg"
type=AVC msg=audit(1146010953.213:45165): avc: denied { execstack } for pid=25009 comm="ffmpeg" scontext=user_u:system_r:httpd_sys_script_t:s0 tcontext=user_u:system_r:httpd_sys_script_t:s0 tclass=process
type=SYSCALL msg=audit(1146010953.213:45165): arch=40000003 syscall=125 success=no exit=-13 a0=bfbe6000 a1=1000 a2=1000007 a3=fffff000 items=0 pid=25009 auid=1000 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 comm="ffmpeg" exe="/usr/bin/ffmpeg"
type=AVC msg=audit(1146010953.221:45166): avc: denied { execstack } for pid=25011 comm="ffmpeg" scontext=user_u:system_r:httpd_sys_script_t:s0 tcontext=user_u:system_r:httpd_sys_script_t:s0 tclass=process
type=SYSCALL msg=audit(1146010953.221:45166): arch=40000003 syscall=125 success=no exit=-13 a0=bf89b000 a1=1000 a2=1000007 a3=fffff000 items=0 pid=25011 auid=1000 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 comm="ffmpeg" exe="/usr/bin/ffmpeg"
when I run the page
producing the error output.
I tried to set the
allow_execstack boolean but it didn't make any difference.
I'm out of ideas on
this one - any help appreciated :)
Robert
Foster
General
Manager
Mountain
Visions P/L http://mountainvisions.com.au
Mobile: 0418 131 065
-- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list
