Attachment 293900 Details for Bug 431446 – selinux alert

selinux alert

selinux_alert.txt (text/plain), 2.55 KB, created by Martin Jürgens on 2008-02-04 16:02:18 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Martin Jürgens

Created: 2008-02-04 16:02:18 UTC

Size: 2.55 KB

patch

obsolete

>Zusammenfassung
>    SELinux hindert /usr/lib/nspluginwrapper/npviewer.bin an der Ãnderung
>    dieses Zugriffs Schutz des Freispeicherbereichs.
>
>Detaillierte Beschreibung
>    The /usr/lib/nspluginwrapper/npviewer.bin application attempted to change
>    the access protection of memory on the heap (e.g., allocated using malloc).
>    This is a potential security problem.  Applications should not be doing
>    this. Applications are sometimes coded incorrectly and request this
>    permission.  The http://people.redhat.com/drepper/selinux-mem.html web page
>    explains how to remove this requirement.  If
>    /usr/lib/nspluginwrapper/npviewer.bin does not work and you need it to work,
>    you can configure SELinux temporarily to allow this access until the
>    application is fixed. Please file a
>    http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package.
>
>Zugriff erlauben
>    Falls Sie mit /usr/lib/nspluginwrapper/npviewer.bin fortfahren mÃ¶chten,
>    mÃ¼ssen Sie allow_execheap Boolesch aktivieren.  Hinweis: Dieser Boolesch
>    wirkt sich auf alle Anwendungen des Systems aus.
>
>    Folgender Befehl erlaubt diesen Zugriff:
>    setsebool -P allow_execheap=1
>
>ZusÃ¤tzliche Informationen    
>
>Quellkontext                  unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023
>Zielkontext                   unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023
>Zielobjekte                   None [ process ]
>Betroffene RPM-Pakete         nspluginwrapper-0.9.91.5-17.fc8 [application]
>RPM-Richtlinie                selinux-policy-3.0.8-81.fc8
>SELinux aktiviert             True
>Richtlinienversion            targeted
>MLS aktiviert                 True
>Enforcing-Modus               Enforcing
>Plugin-Name                   plugins.allow_execheap
>Hostname                      jedora-laptop
>Plattform                     Linux jedora-laptop 2.6.23.14-107.fc8 #1 SMP Mon
>                              Jan 14 21:37:30 EST 2008 i686 i686
>Anzahl der Alarme             2
>First Seen                    Mo 04 Feb 2008 16:51:19 CET
>Last Seen                     Mo 04 Feb 2008 16:51:19 CET
>Local ID                      c1e9756d-c88f-49de-b0ce-f75097e4db05
>Zeilennummern                 
>
>Raw-Audit-Meldungen           
>
>avc: denied { execheap } for comm=npviewer.bin egid=501 euid=501
>exe=/usr/lib/nspluginwrapper/npviewer.bin exit=-13 fsgid=501 fsuid=501 gid=501
>items=0 pid=2940 scontext=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023
>sgid=501 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 suid=501
>tclass=process tcontext=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023
>tty=(none) uid=501
>

Actions: View

Attachments on bug 431446: 293900