Attachment 254661 Details for Bug 375961 – Summary SELinux is preventing /usr/lib/firefox-2.0.0.8/firefox-bin from loading /usr/lib/firefox-2.0.0.8/plugins/nppdf.so which requires text relocation. Detailed Description The /usr/lib

Summary SELinux is preventing /usr/lib/firefox-2.0.0.8/firefox-bin from loading /usr/lib/firefox-2.0.0.8/plugins/nppdf.so which requires text relocation. Detailed Description The /usr/lib

selinux_alert.txt (text/plain), 2.20 KB, created by steed wells on 2007-11-11 14:22:09 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: steed wells

Created: 2007-11-11 14:22:09 UTC

Size: 2.20 KB

patch

obsolete

>Summary
>    SELinux is preventing ld-linux.so.2 from changing the access protection of
>    memory on the heap.
>
>Detailed Description
>    The ld-linux.so.2 application attempted to change the access protection of
>    memory on the heap (e.g., allocated using malloc).  This is a potential
>    security problem.  Applications should not be doing this. Applications are
>    sometimes coded incorrectly and request this permission.  The
>    http://people.redhat.com/drepper/selinux-mem.html web page explains how to
>    remove this requirement.  If ld-linux.so.2 does not work and you need it to
>    work, you can configure SELinux temporarily to allow this access until the
>    application is fixed. Please file a
>    http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package.
>
>Allowing Access
>    If you want ld-linux.so.2 to continue, you must turn on the allow_execheap
>    boolean.  Note: This boolean will affect all applications on the system.
>
>    The following command will allow this access:
>    setsebool -P allow_execheap=1
>
>Additional Information        
>
>Source Context                unconfined_u:unconfined_r:unconfined_crond_t:s0
>Target Context                unconfined_u:unconfined_r:unconfined_crond_t:s0
>Target Objects                None [ process ]
>Affected RPM Packages         
>Policy RPM                    selinux-policy-3.0.8-44.fc8
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   plugins.allow_execheap
>Host Name                     localhost.localdomain
>Platform                      Linux localhost.localdomain 2.6.23.1-42.fc8 #1 SMP
>                              Tue Oct 30 13:55:12 EDT 2007 i686 athlon
>Alert Count                   1
>First Seen                    Sun 11 Nov 2007 04:17:47 AM EST
>Last Seen                     Sun 11 Nov 2007 04:17:47 AM EST
>Local ID                      020a018d-4170-41dd-8545-5efe4f21fcdd
>Line Numbers                  
>
>Raw Audit Messages            
>
>avc: denied { execheap } for comm=ld-linux.so.2 pid=20805
>scontext=unconfined_u:unconfined_r:unconfined_crond_t:s0 tclass=process
>tcontext=unconfined_u:unconfined_r:unconfined_crond_t:s0
>

Actions: View

Attachments on bug 375961: 254661