Login
[x]
Log in using an account from:
Fedora Account System
Red Hat Associate
Red Hat Customer
Or login using a Red Hat Bugzilla account
Forgot Password
Login:
Hide Forgot
Create an Account
Red Hat Bugzilla – Attachment 317610 Details for
Bug 463781
SELinux violation from totem-audio-preview wanting an executable stack
[?]
New
Simple Search
Advanced Search
My Links
Browse
Requests
Reports
Current State
Search
Tabular reports
Graphical reports
Duplicates
Other Reports
User Changes
Plotly Reports
Bug Status
Bug Severity
Non-Defaults
|
Product Dashboard
Help
Page Help!
Bug Writing Guidelines
What's new
Browser Support Policy
5.0.4.rh83 Release notes
FAQ
Guides index
User guide
Web Services
Contact
Legal
This site requires JavaScript to be enabled to function correctly, please enable it.
SELinux alert
selinux_alert.txt (text/plain), 3.67 KB, created by
Ben Gamari
on 2008-09-24 17:38:58 UTC
(
hide
)
Description:
SELinux alert
Filename:
MIME Type:
Creator:
Ben Gamari
Created:
2008-09-24 17:38:58 UTC
Size:
3.67 KB
patch
obsolete
> >Summary: > >SELinux is preventing totem-audio-pre from making the program stack executable. > >Detailed Description: > >The totem-audio-pre application attempted to make its stack executable. This is >a potential security problem. This should never ever be necessary. Stack memory >is not executable on most OSes these days and this will not change. Executable >stack memory is one of the biggest security problems. An execstack error might >in fact be most likely raised by malicious code. Applications are sometimes >coded incorrectly and request this permission. The SELinux Memory Protection >Tests (http://people.redhat.com/drepper/selinux-mem.html) web page explains how >to remove this requirement. If totem-audio-pre does not work and you need it to >work, you can configure SELinux temporarily to allow this access until the >application is fixed. Please file a bug report >(http://bugzilla.redhat.com/bugzilla/enter_bug.cgi) against this package. > >Allowing Access: > >Sometimes a library is accidentally marked with the execstack flag, if you find >a library with this flag you can clear it with the execstack -c LIBRARY_PATH. >Then retry your application. If the app continues to not work, you can turn the >flag back on with execstack -s LIBRARY_PATH. Otherwise, if you trust >totem-audio-pre to run correctly, you can change the context of the executable >to unconfined_execmem_exec_t. "chcon -t unconfined_execmem_exec_t >'/usr/bin/totem-audio-preview'" You must also change the default file context >files on the system in order to preserve them even on a full relabel. "semanage >fcontext -a -t unconfined_execmem_exec_t '/usr/bin/totem-audio-preview'" > >Fix Command: > >chcon -t unconfined_execmem_exec_t '/usr/bin/totem-audio-preview' > >Additional Information: > >Source Context unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1 > 023 >Target Context unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1 > 023 >Target Objects None [ process ] >Source totem >Source Path /usr/bin/totem >Port <Unknown> >Host mercury.localdomain >Source RPM Packages totem-2.23.91-3.fc10 >Target RPM Packages >Policy RPM selinux-policy-3.5.7-1.fc10 >Selinux Enabled True >Policy Type targeted >MLS Enabled True >Enforcing Mode Enforcing >Plugin Name allow_execstack >Host Name mercury.localdomain >Platform Linux mercury.localdomain > 2.6.27-0.329.rc6.git2.fc10.x86_64 #1 SMP Mon Sep > 15 19:10:22 EDT 2008 x86_64 x86_64 >Alert Count 122 >First Seen Mon 25 Aug 2008 02:10:43 AM EDT >Last Seen Wed 24 Sep 2008 01:03:40 PM EDT >Local ID d5d8c85e-6ea0-47e2-9fdd-d16f7c2fb7aa >Line Numbers > >Raw Audit Messages > >node=mercury.localdomain type=AVC msg=audit(1222275820.166:80): avc: denied { execstack } for pid=24900 comm="totem-audio-pre" scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=process > >node=mercury.localdomain type=SYSCALL msg=audit(1222275820.166:80): arch=c000003e syscall=10 success=yes exit=0 a0=7fffdd054000 a1=1000 a2=1000007 a3=3193c20000 items=0 ppid=1 pid=24900 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="totem-audio-pre" exe="/usr/bin/totem-audio-preview" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) > >
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 463781
: 317610