--- Daniel J Walsh <dwalsh@xxxxxxxxxx> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Antonio Olivares wrote: > > Ok Seamonkey and selinux, firefox, and nsplugin. > > > > Here are the results. Thanks for your suggestions > and > > advice in advance. > > > > Antonio > > > > > > > > Summary: > > > > SELinux is preventing plugin-config > > (nsplugin_config_t) "execstack" to <Unknown> > > (nsplugin_config_t). > > > > Detailed Description: > > > > SELinux denied access requested by plugin-config. > It > > is not expected that this > > access is required by plugin-config and this > access > > may signal an intrusion > > attempt. It is also possible that the specific > version > > or configuration of the > > application is causing it to require additional > > access. > > > > Allowing Access: > > > > You can generate a local policy module to allow > this > > access - see FAQ > > > (http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) > > Or you can disable > > SELinux protection altogether. Disabling SELinux > > protection is not recommended. > > Please file a bug report > > > (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi) > > against this package. > > > > Additional Information: > > > > Source Context > > unconfined_u:unconfined_r:nsplugin_config_t > > > :SystemLow-SystemHigh > > Target Context > > unconfined_u:unconfined_r:nsplugin_config_t > > > :SystemLow-SystemHigh > > Target Objects None [ process ] > > Source plugin-config > > Source Path > > /usr/lib/nspluginwrapper/plugin-config > > Port <Unknown> > > Host localhost > > Source RPM Packages > > nspluginwrapper-0.9.91.5-22.fc9 > > Target RPM Packages > > Policy RPM > > selinux-policy-3.3.0-1.fc9 > > Selinux Enabled True > > Policy Type targeted > > MLS Enabled True > > Enforcing Mode Enforcing > > Plugin Name catchall > > Host Name localhost > > Platform Linux localhost > > 2.6.25-0.65.rc2.git7.fc9 #1 SMP > > Sat Feb 23 23:06:09 > EST > > 2008 i686 athlon > > Alert Count 2 > > First Seen Tue 26 Feb 2008 > 03:17:23 > > PM CST > > Last Seen Tue 26 Feb 2008 > 03:22:56 > > PM CST > > Local ID > > 276820c9-9871-4632-8ec1-c8909c8d7c0b > > Line Numbers > > > > Raw Audit Messages > > > > host=localhost type=AVC > msg=audit(1204060976.98:110): > > avc: denied { execstack } for pid=20500 > > comm="plugin-config" > > > scontext=unconfined_u:unconfined_r:nsplugin_config_t:s0-s0:c0.c1023 > > > tcontext=unconfined_u:unconfined_r:nsplugin_config_t:s0-s0:c0.c1023 > > tclass=process > > > > host=localhost type=SYSCALL > > msg=audit(1204060976.98:110): arch=40000003 > > syscall=125 success=no exit=-13 a0=bf957000 > a1=1000 > > a2=1000007 a3=fffff000 items=0 ppid=20498 > pid=20500 > > auid=500 uid=500 gid=500 euid=0 suid=0 fsuid=0 > > egid=500 sgid=500 fsgid=500 tty=(none) ses=1 > > comm="plugin-config" > > exe="/usr/lib/nspluginwrapper/plugin-config" > > > subj=unconfined_u:unconfined_r:nsplugin_config_t:s0-s0:c0.c1023 > > key=(null) > > > > > > > > > Will add to tonights policy update. > > > > > ____________________________________________________________________________________ > > Be a better friend, newshound, and > > know-it-all with Yahoo! Mobile. Try it now. > http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ > > > > > -- > > fedora-selinux-list mailing list > > fedora-selinux-list@xxxxxxxxxx > > > https://www.redhat.com/mailman/listinfo/fedora-selinux-list > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.8 (GNU/Linux) > Comment: Using GnuPG with Fedora - > http://enigmail.mozdev.org > > iEYEARECAAYFAkfFvTEACgkQrlYvE4MpobM7kwCfbudvNu7595pzZpJlFY8bnhZm > jVkAnAj0tVLXKeYEC+u47oF20ZhXBTX2 > =s/HR > -----END PGP SIGNATURE----- > Thank you very much. :) Your efforts are greatly appreciated. Sorry for sending all of the setroubleshoot complaints. I am sending another one after this message. Regards, Antonio ____________________________________________________________________________________ Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ -- fedora-test-list mailing list fedora-test-list@xxxxxxxxxx To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-test-list
