Bug 1932676

Summary: SELinux is preventing privoxy from using the execmem access on a process.
Product: [Fedora] Fedora Reporter: aighie5E <samarino>
Component: privoxyAssignee: Gwyn Ciesla <gwync>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 32CC: cheese, dwalsh, grepl.miroslav, gwync, karsten, lvrabec, mmalik, omosnace, plautrba, vmojzis, zpytela
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2021-02-25 08:40:45 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description aighie5E 2021-02-24 22:08:10 UTC
Description of problem: SELinux is preventing privoxy from using the execmem access on a process.

Version-Release number of selected component (if applicable): 5.10.16-100.fc32.x86_645.10.16-100.fc32.x86_64
Privoxy version 3.0.31
Mozilla Firefox 85.0.1

How reproducible: very easily

Steps to Reproduce:
1. dnf distro-sync upgrrade to 5.10.16-100.fc32.x86_645.10.16-100.fc32.x86_64

2. Firefox to http://finance.yahoo.com/q/hp?s=slv

3.

Actual results:  Going on 23,383 SELinux alerts.


Expected results: 0 SELinux alerts prior to dnf distro-sync upgrade.


Additional info:

Comment 1 Zdenek Pytela 2021-02-25 08:20:11 UTC
The execmem permission is required for mapping a memory region as executable which is not common and is possibly insecure so it is disabled by default.
Request for it may indicate an issue with the package or library code, so switching the component for the maintainer to assess this request.

Comment 2 Zdenek Pytela 2021-02-25 08:40:45 UTC
We are already tracking this bug, closing as a duplicate.

*** This bug has been marked as a duplicate of bug 1917099 ***