Re: dvdemux notifications

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi Andrea,

On 02/12/2018 07:21 PM, Andrea Vai wrote:
Hi all,
   I am getting continuous selinux notifications about a "dvdemux"
process, and I don't know how to manage it.

Some of the (revelant?) data in the message window:

SELinux impedisce a dvdemux0:sink un accesso execstack su un processo.
[Translation from italian: SELinux denies to dvdemux0:sink an execstac
access on a process]

type=AVC msg=audit(1518457458.85:1216): avc:  denied  { execstack }
for  pid=3263 comm="gst-plugin-scan"
scontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023
tcontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023
tclass=process permissive=0


It's good that SELinux denied this action. Command "gst-plugin-scan" is trying to make stack executable which is possible attack or possible bug in code.

AFAIK, gst-plugin-scan should be part of gstreamer-plugin-ugly package. Could you please contact gstreamer developers for more info?

Thanks,
Lukas.

Hash: dvdemux0:sink,thumb_t,thumb_t,process,execstack

Can you help me please? I have a lot of notifications every day. I
don't know selinux so even a couple of hints would be very
appreciated.

Let me know if I have to provide more information.

Thank you very much,
Andrea (Fedora 27)
_______________________________________________
selinux mailing list -- selinux@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to selinux-leave@xxxxxxxxxxxxxxxxxxxxxxx



--
Lukas Vrabec
Software Engineer, Security Technologies
Red Hat, Inc.
_______________________________________________
selinux mailing list -- selinux@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to selinux-leave@xxxxxxxxxxxxxxxxxxxxxxx




[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux