Attachment 365158 Details for Bug 529539 – selinux alert text file with detailed information concerning the bug

selinux alert text file with detailed information concerning the bug

selinux_alert.txt (text/plain), 3.09 KB, created by bastian.frank on 2009-10-18 12:42:37 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: bastian.frank

Created: 2009-10-18 12:42:37 UTC

Size: 3.09 KB

patch

obsolete

>
>Zusammenfassung:
>
>SELinux is preventing ld-linux.so.2 from loading /usr/lib/libADM5avutil.so.50
>which requires text relocation.
>
>Detaillierte Beschreibung:
>
>The ld-linux.so.2 application attempted to load /usr/lib/libADM5avutil.so.50
>which requires text relocation. This is a potential security problem. Most
>libraries do not need this permission. Libraries are sometimes coded incorrectly
>and request this permission. The SELinux Memory Protection Tests
>(http://people.redhat.com/drepper/selinux-mem.html) web page explains how to
>remove this requirement. You can configure SELinux temporarily to allow
>/usr/lib/libADM5avutil.so.50 to use relocation as a workaround, until the
>library is fixed. Please file a bug report
>(http://bugzilla.redhat.com/bugzilla/enter_bug.cgi) against this package.
>
>Zugriff erlauben:
>
>If you trust /usr/lib/libADM5avutil.so.50 to run correctly, you can change the
>file context to textrel_shlib_t. "chcon -t textrel_shlib_t
>'/usr/lib/libADM5avutil.so.50'" You must also change the default file context
>files on the system in order to preserve them even on a full relabel. "semanage
>fcontext -a -t textrel_shlib_t '/usr/lib/libADM5avutil.so.50'"
>
>Fixer Befehl:
>
>chcon -t textrel_shlib_t '/usr/lib/libADM5avutil.so.50'
>
>ZusÃ¤tzliche Informationen:
>
>Quellkontext                  system_u:system_r:prelink_t:s0-s0:c0.c1023
>Zielkontext                   system_u:object_r:lib_t:s0
>Zielobjekte                   /usr/lib/libADM5avutil.so.50 [ file ]
>Quelle                        ld-linux.so.2
>Quellen-Pfad                  /lib/ld-2.10.1.so
>Port                          <Unbekannt>
>Host                          localhost.localdomain
>Quellen-RPM-Pakete            glibc-2.10.1-5
>Ziel-RPM-Pakete               avidemux-libs-2.5.0-9.20090814svn.fc11
>RPM-Richtlinie                selinux-policy-3.6.12-85.fc11
>SELinux aktiviert             True
>Richtlinienversion            targeted
>MLS aktiviert                 True
>Enforcing-Modus               Enforcing
>Plugin-Name                   allow_execmod
>Hostname                      localhost.localdomain
>Plattform                     Linux localhost.localdomain 2.6.30.8-64.fc11.i586
>                              #1 SMP Fri Sep 25 04:30:19 EDT 2009 i686 i686
>Anzahl der Alarme             2
>Zuerst gesehen                Mo 12 Okt 2009 20:06:43 CEST
>Zuletzt gesehen               So 18 Okt 2009 14:13:29 CEST
>Lokale ID                     750cfa24-6f13-4925-8216-9739a174e274
>Zeilennummern                 
>
>Raw-Audit-Meldungen           
>
>node=localhost.localdomain type=AVC msg=audit(1255868009.53:19): avc:  denied  { execmod } for  pid=6257 comm="ld-linux.so.2" path="/usr/lib/libADM5avutil.so.50" dev=dm-0 ino=86115 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023 tcontext=system_u:object_r:lib_t:s0 tclass=file
>
>node=localhost.localdomain type=SYSCALL msg=audit(1255868009.53:19): arch=40000003 syscall=125 success=no exit=-13 a0=7b7000 a1=e000 a2=5 a3=bf888a10 items=0 ppid=3452 pid=6257 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=2 comm="ld-linux.so.2" exe="/lib/ld-2.10.1.so" subj=system_u:system_r:prelink_t:s0-s0:c0.c1023 key=(null)
>
>

Actions: View

Attachments on bug 529539: 365158