Bug 189622

Summary:	(SELinux denial) Flash Player 7 uses text relocations
Product:	Red Hat Enterprise Linux 4	Reporter:	Warren Togami <wtogami>
Component:	flash-plugin	Assignee:	Warren Togami <wtogami>
Status:	CLOSED CURRENTRELEASE	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	4.0	CC:	davem, ed.costello, emhuang, mmelanso, mtilburg, mwaite, rsandu2004, zcerza
Target Milestone:	---	Keywords:	Desktop
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	flash-plugin-9.0.31.0	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2007-04-17 17:32:07 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	189808

Description Warren Togami 2006-04-21 18:31:41 UTC

libflashplayer.so (7.0.63 and earlier) uses text relocations.  Text relocations
will soon be disallowed by selinux policies because it is a security risk.

Possible causes of text relocations:
1) Some code was not compiled with -fpic.
2) Hand written asm code that is not position independent.
3) Some compiler toolchain bug (possibly Bug #175442).

Ulrich Drepper recommends that Macromedia try FC5 as a development platform
because it contains the latest gcc and related compiling toolchains.  FC5
contains eu-findtextrel, whihc can aid in locating these problems.

Comment 1 Warren Togami 2006-06-26 21:34:38 UTC

There are two temporary workarounds for this problem for Fedora users, as we
wait for the next release of Flash Player that fixes this issue:

1) chcon -t textrel_shlib_t libflashplayer.so
   Do this on the file manually after Firefox has downloaded it to your home
directory.
2) http://macromedia.mplug.org/
   Use the flash-plugin RPM instead.

Comment 3 Michael Tilburg 2006-10-23 18:06:48 UTC

This is fixed in Flash Player 9 beta here:

http://labs.adobe.com/downloads/flashplayer9.html

Comment 4 Warren Togami 2007-01-10 20:20:39 UTC

Until Flash Player 9 is released, you can workaround this selinux denial problem
by using the Flash 7 RPM from:
http://macromedia.mplug.org/

Comment 5 Warren Togami 2007-01-10 20:26:10 UTC

*** Bug 222100 has been marked as a duplicate of this bug. ***

Comment 6 Warren Togami 2007-01-10 20:26:12 UTC

*** Bug 207621 has been marked as a duplicate of this bug. ***