Bug 297341

Summary: nspluginwrapper needs policy
Product: [Fedora] Fedora Reporter: Jeremy Katz <katzj>
Component: selinux-policyAssignee: Daniel Walsh <dwalsh>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: low Docs Contact:
Priority: low    
Version: rawhideCC: caillon, stransky
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2007-09-20 05:58:02 EDT Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---
Bug Depends On:    
Bug Blocks: 235703    

Description Jeremy Katz 2007-09-19 23:21:57 EDT
Using nspluginwrapper to run plugins ends up meaning that it needs
unconfined_execmem_exec_t (... and it might mean that we can drop it from
firefox in the future).

avc: denied { execmem } for comm=npviewer.bin egid=500 euid=500
exe=/usr/lib/nspluginwrapper/npviewer.bin exit=-13 fsgid=500 fsuid=500 gid=500
items=0 pid=10729 scontext=system_u:system_r:unconfined_t:s0 sgid=500
subj=system_u:system_r:unconfined_t:s0 suid=500 tclass=process
tcontext=system_u:system_r:unconfined_t:s0 tty=(none) uid=500
Comment 1 Martin Stransky 2007-09-20 05:58:02 EDT
It's a dupe of Bug 250249

*** This bug has been marked as a duplicate of 250249 ***