Attachment 260711 Details for Bug 386191 – from SE Linux troubleshoot browser

from SE Linux troubleshoot browser

selinux_alert_1.txt (text/plain), 2.74 KB, created by Chuck Abraham on 2007-11-16 03:09:09 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Chuck Abraham

Created: 2007-11-16 03:09:09 UTC

Size: 2.74 KB

patch

obsolete

>Summary
>    SELinux is preventing DarwinStreaming from loading
>    /usr/local/sbin/StreamingServerModules/QTSSRefMovieModule which requires
>    text relocation.
>
>Detailed Description
>    The DarwinStreaming application attempted to load
>    /usr/local/sbin/StreamingServerModules/QTSSRefMovieModule which requires
>    text relocation.  This is a potential security problem. Most libraries do
>    not need this permission. Libraries are sometimes coded incorrectly and
>    request this permission.  The http://people.redhat.com/drepper/selinux-
>    mem.html web page explains how to remove this requirement.  You can
>    configure SELinux temporarily to allow
>    /usr/local/sbin/StreamingServerModules/QTSSRefMovieModule to use relocation
>    as a workaround, until the library is fixed. Please file a
>    http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package.
>
>Allowing Access
>    If you trust /usr/local/sbin/StreamingServerModules/QTSSRefMovieModule to
>    run correctly, you can change the file context to textrel_shlib_t. "chcon -t
>    textrel_shlib_t /usr/local/sbin/StreamingServerModules/QTSSRefMovieModule"
>    You must also change the default file context files on the system in order
>    to preserve them even on a full relabel.  "semanage fcontext -a -t
>    textrel_shlib_t /usr/local/sbin/StreamingServerModules/QTSSRefMovieModule"
>
>    The following command will allow this access:
>    chcon -t textrel_shlib_t /usr/local/sbin/StreamingServerModules/QTSSRefMovieModule
>
>Additional Information        
>
>Source Context                system_u:system_r:unconfined_t:s0-s0:c0.c1023
>Target Context                system_u:object_r:bin_t:s0
>Target Objects                /usr/local/sbin/StreamingServerModules/QTSSRefMovi
>                              eModule [ file ]
>Affected RPM Packages         
>Policy RPM                    selinux-policy-3.0.8-47.fc8
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   plugins.allow_execmod
>Host Name                     localhost.localdomain
>Platform                      Linux localhost.localdomain 2.6.23.1-49.fc8 #1 SMP
>                              Thu Nov 8 21:41:26 EST 2007 i686 i686
>Alert Count                   6
>First Seen                    Sat 10 Nov 2007 03:19:57 PM EST
>Last Seen                     Thu 15 Nov 2007 09:58:21 PM EST
>Local ID                      fb0561de-fcb6-4630-bcdc-56ad28433301
>Line Numbers                  
>
>Raw Audit Messages            
>
>avc: denied { execmod } for comm=DarwinStreaming dev=dm-0
>path=/usr/local/sbin/StreamingServerModules/QTSSRefMovieModule pid=16295
>scontext=system_u:system_r:unconfined_t:s0-s0:c0.c1023 tclass=file
>tcontext=system_u:object_r:bin_t:s0
>

Actions: View

Attachments on bug 386191: 260711