I have Mugshot 1.1.49 installed in Fedora 7 on my laptop. My preferred browser is Firefox (current version is 2.0.0.8). Whenever I click on a link in Mugshot Stacker I get the following SELinux denial message. ********************************************************************** Summary SELinux is preventing /usr/lib/firefox-2.0.0.8/firefox-bin from loading /usr/lib/mozilla/plugins/nppdf.so which requires text relocation. Detailed Description The /usr/lib/firefox-2.0.0.8/firefox-bin application attempted to load /usr/lib/mozilla/plugins/nppdf.so which requires text relocation. This is a potential security problem. Most libraries do not need this permission. Libraries are sometimes coded incorrectly and request this permission. The http://people.redhat.com/drepper/selinux-mem.html web page explains how to remove this requirement. You can configure SELinux temporarily to allow /usr/lib/mozilla/plugins/nppdf.so to use relocation as a workaround, until the library is fixed. Please file a http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package. Additional Information Source Context user_u:system_r:unconfined_t Target Context system_u:object_r:lib_t Target Objects /usr/lib/mozilla/plugins/nppdf.so [ file ] Affected RPM Packages firefox-2.0.0.8-1.fc7 [application] Policy RPM selinux-policy-2.6.4-48.fc7 Selinux Enabled True Policy Type targeted MLS Enabled True Enforcing Mode Enforcing Plugin Name plugins.allow_execmod Host Name xxxx.xxxx.xxxx.xxx Platform Linux xxxx.xxxx.xxxx.xxx 2.6.22.9-91.fc7 #1 SMP Thu Sep 27 23:10:59 EDT 2007 i686 i686 Alert Count 18 First Seen Sun 23 Sep 2007 04:03:01 PM CDT Last Seen Thu 25 Oct 2007 11:43:58 AM CDT Local ID cde796e0-2c91-46d1-aaff-f79d3a6a91f3 Line Numbers Raw Audit Messages avc: denied { execmod } for comm="firefox-bin" dev=dm-0 egid=500 euid=500 exe="/usr/lib/firefox-2.0.0.8/firefox-bin" exit=-13 fsgid=500 fsuid=500 gid=500 items=0 name="nppdf.so" path="/usr/lib/mozilla/plugins/nppdf.so" pid=4818 scontext=user_u:system_r:unconfined_t:s0 sgid=500 subj=user_u:system_r:unconfined_t:s0 suid=500 tclass=file tcontext=system_u:object_r:lib_t:s0 tty=(none) uid=500 ************************************************************************ Is this a known bug? I have seen it other versions of Mugshot as well as Firefox. -- Best Regards, Aravind http://www.aravind.name
Attachment:
signature.asc
Description: This is a digitally signed message part
-- fedora-test-list mailing list fedora-test-list@xxxxxxxxxx To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-test-list
