Bug 118875

Summary: Mozilla fails to start.
Product: [Fedora] Fedora Reporter: Charles R. Anderson <cra>
Component: policyAssignee: Daniel Walsh <dwalsh>
Status: CLOSED RAWHIDE QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: rawhideCC: pgraner
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2004-05-10 14:57:30 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 114961    

Description Charles R. Anderson 2004-03-22 06:56:33 UTC 
Description of problem:

Mozilla fails to start.

Version-Release number of selected component (if applicable):

policy-1.9-5
mozilla-1.6-2

How reproducible:

Click on web broswer icon in panel, or open terminal window and type
"mozilla"

Steps to Reproduce:
1. System Tools -> Terminal
2. bash -e mozilla
3.
  
Actual results:

[cra@foo cra]$ bash -e /usr/bin/mozilla
/usr/bin/mozilla: line 37: ulimit: core file size: cannot modify limit: 
Permission denied

Expected results:

I guess ulimit has to be allowed in the policy, or removed from the
startup script.

Additional info:
Comment 1 Daniel Walsh 2004-03-22 15:06:07 UTC 
Could you grab the AVC messages from the message file?

Dan
Comment 2 Charles R. Anderson 2004-03-22 16:17:06 UTC 
Mar 22 01:51:53 foo kernel: audit(1079938313.671:0): avc:  denied  {
search } for  pid=28064 exe=/bin/bash dev= ino=1
scontext=user_u:user_r:user_mozilla_t
tcontext=system_u:object_r:devpts_t tclass=dir
Mar 22 01:51:53 foo kernel: audit(1079938313.673:0): avc:  denied  {
search } for  pid=28064 exe=/bin/bash dev= ino=1
scontext=user_u:user_r:user_mozilla_t
tcontext=system_u:object_r:devpts_t tclass=dir
Mar 22 01:52:06 foo kernel: audit(1079938326.827:0): avc:  denied  {
search } for  pid=28553 exe=/bin/bash dev= ino=1
scontext=user_u:user_r:user_mozilla_t
tcontext=system_u:object_r:devpts_t tclass=dir
Mar 22 01:52:06 foo kernel: audit(1079938326.828:0): avc:  denied  {
search } for  pid=28553 exe=/bin/bash dev= ino=1
scontext=user_u:user_r:user_mozilla_t
tcontext=system_u:object_r:devpts_t tclass=dir
Mar 22 01:52:33 foo kernel: audit(1079938353.268:0): avc:  denied  {
search } for  pid=29555 exe=/bin/bash dev= ino=1
scontext=user_u:user_r:user_mozilla_t
tcontext=system_u:object_r:devpts_t tclass=dir
Mar 22 01:52:33 foo kernel: audit(1079938353.271:0): avc:  denied  {
search } for  pid=29555 exe=/bin/bash dev= ino=1
scontext=user_u:user_r:user_mozilla_t
tcontext=system_u:object_r:devpts_t tclass=dir
Comment 3 Daniel Walsh 2004-03-25 02:39:49 UTC 
Should work with latest policy. policy-1.9-15