Bug 221280
Summary: | selinux errors with mythtv and mythweb applications (from atrpms) | ||
---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Need Real Name <bugzilla> |
Component: | selinux-policy-targeted | Assignee: | Daniel Walsh <dwalsh> |
Status: | CLOSED NOTABUG | QA Contact: | Ben Levenson <benl> |
Severity: | medium | Docs Contact: | |
Priority: | medium | ||
Version: | 6 | CC: | axel.thimm |
Target Milestone: | --- | ||
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | Bug Fix | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2007-01-11 22:08:01 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Need Real Name
2007-01-03 15:27:12 UTC
chcon -t textrel_shlib_t libmythavcodec-0.20.so.0.20.0 Should fix the execmod problems. Installing setroubleshoot will help diagnose problems. THe other problem seems to be a badly mislabeled file system. You have a file/directory that is not labeled. This is what file_t indicates. You can either label the file system using restorecon on mount it using a -o context= switch. Make sure you are up2date on policy also. Please send me the full path to the execmod libraries. And attaching the audit.log would make it easier to diagnose. Daniel, Can you clarify whether these problems are best fixed by doing the 'chcon' in the rpm spec file or by changing the 'base' policy? Also, the paths to the library are: /usr/lib/libmythavcodec-0.20.so.0 -> libmythavcodec-0.20.so.0.2 /usr/lib/libmythavcodec-0.20.so.0.20 -> libmythavcodec-0.20.so.0.20.0* /usr/lib/libmythavcodec-0.20.so.0.20.0* I will change the base policy. The best place to fix this is to just fix the library. The library should not require execmod and is probably compiled incorrectly or should be coded differently. Updaded base policy will be in selinux-policy-2.4.6-27 http://people.redhat.com/~drepper/selinux-mem.html Explains what execmod means. |