Attachment 157597 Details for Bug 245288 – selinux alert message

selinux alert message

selinux_alert.txt (text/plain), 2.59 KB, created by Wayne Hammond on 2007-06-22 06:02:34 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Wayne Hammond

Created: 2007-06-22 06:02:34 UTC

Size: 2.59 KB

patch

obsolete

>Summary
>    SELinux is preventing /lib/ld-2.6.so from loading
>    /usr/lib/libSDL-1.2.so.0.11.0.#prelink#.HKIsVU which requires text
>    relocation.
>
>Detailed Description
>    The /lib/ld-2.6.so application attempted to load
>    /usr/lib/libSDL-1.2.so.0.11.0.#prelink#.HKIsVU which requires text
>    relocation.  This is a potential security problem. Most libraries do not
>    need this permission. Libraries are sometimes coded incorrectly and request
>    this permission.  The http://people.redhat.com/drepper/selinux-mem.html web
>    page explains how to remove this requirement.  You can configure SELinux
>    temporarily to allow /usr/lib/libSDL-1.2.so.0.11.0.#prelink#.HKIsVU to use
>    relocation as a workaround, until the library is fixed. Please file a
>    http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package.
>
>Allowing Access
>    If you trust /usr/lib/libSDL-1.2.so.0.11.0.#prelink#.HKIsVU to run
>    correctly, you can change the file context to textrel_shlib_t. "chcon -t
>    textrel_shlib_t /usr/lib/libSDL-1.2.so.0.11.0.#prelink#.HKIsVU"
>
>    The following command will allow this access:
>    chcon -t textrel_shlib_t /usr/lib/libSDL-1.2.so.0.11.0.#prelink#.HKIsVU
>
>Additional Information        
>
>Source Context                user_u:system_r:prelink_t
>Target Context                user_u:object_r:lib_t
>Target Objects                /usr/lib/libSDL-1.2.so.0.11.0.#prelink#.HKIsVU [
>                              file ]
>Affected RPM Packages         glibc-2.6-3 [application]
>Policy RPM                    selinux-policy-2.6.4-14.fc7
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   plugins.allow_execmod
>Host Name                     localhost.localdomain
>Platform                      Linux localhost.localdomain 2.6.21-1.3228.fc7 #1
>                              SMP Tue Jun 12 15:37:31 EDT 2007 i686 athlon
>Alert Count                   1
>First Seen                    Fri 22 Jun 2007 12:17:14 AM CDT
>Last Seen                     Fri 22 Jun 2007 12:17:14 AM CDT
>Local ID                      fa8f43e3-4527-443d-9f4d-a6a1775ce8c8
>Line Numbers                  
>
>Raw Audit Messages            
>
>avc: denied { execmod } for comm="ld-linux.so.2" dev=dm-0 egid=0 euid=0
>exe="/lib/ld-2.6.so" exit=-13 fsgid=0 fsuid=0 gid=0 items=0
>name="libSDL-1.2.so.0.11.0.#prelink#.HKIsVU"
>path="/usr/lib/libSDL-1.2.so.0.11.0.#prelink#.HKIsVU" pid=16737
>scontext=user_u:system_r:prelink_t:s0 sgid=0 subj=user_u:system_r:prelink_t:s0
>suid=0 tclass=file tcontext=user_u:object_r:lib_t:s0 tty=pts0 uid=0
>

Actions: View

Attachments on bug 245288: 157597 | 157644 | 157999 | 158000 | 158114 | 158115