Bug 326081

Summary: selinux prevents vmplayer to load libview.so.2
Product: [Fedora] Fedora Reporter: Daniel Rogowski <d.rogowski>
Component: selinux-policy-targetedAssignee: Daniel Walsh <dwalsh>
Status: CLOSED CURRENTRELEASE QA Contact: Ben Levenson <benl>
Severity: medium Docs Contact:
Priority: low    
Version: 7   
Target Milestone: ---   
Target Release: ---   
Hardware: i686   
OS: Linux   
Whiteboard:
Fixed In Version: Current Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2008-01-30 19:06:41 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
AVC messages none

Description Daniel Rogowski 2007-10-10 10:25:09 UTC 
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (compatible; Konqueror/3.5; Linux) KHTML/3.5.7 (like Gecko)

Description of problem:
I tried to execute the vmplayer. It gave the following error:
"/usr/lib/vmware/bin/vmplayer: error while loading shared libraries: 
libview.so.2: cannot open shared object file: No such file or directory"

After that I deactivated SELinux, tried again and it worked. I didn't change 
anything else.

Version-Release number of selected component (if applicable):
selinux-policy-targeted-2.6.4-46.fc7

How reproducible:
Always


Steps to Reproduce:
(0. Activate SELinux)
1. Download the VMware-player-2.0.1-55017.i386.rpm
2. Install it: "yum localinstall VMware-player-2.0.1-55017.i386.rpm" (maybe 
you have to deactivate "gpgcheck")
3. Run the configurator: "/usr/bin/vmware-config.pl" and use default options
4. Run the player: "vmplayer"

Actual Results:
It didn't run and gave the following error msg instead:
/usr/lib/vmware/bin/vmplayer: error while loading shared libraries: 
libview.so.2: cannot open shared object file: No such file or directory

Expected Results:
The vmplayer should have run.

Additional info:
Comment 1 Daniel Walsh 2007-10-10 13:24:19 UTC 
Did you see any avc messages in /var/log/audit/audit.log or /var/log/messages?

You can probably 

chcon -t textrel_shlib_t PATHTOSHLIBS

To get it to work with SELinux.

This is caused because vmware has built their libraries incorrectly.  Please
attach the AVC messages and I will fix the labeling.
Comment 2 Daniel Rogowski 2007-10-10 14:01:54 UTC 
Created attachment 222501 [details]
AVC messages
Comment 3 Daniel Rogowski 2007-10-10 14:07:45 UTC 
"chcon -t textrel_shlib_t /usr/lib/vmware/lib/*" didn't change anything.
Comment 4 Daniel Walsh 2007-10-11 13:27:31 UTC 
YOu can turn off execstack protection with 

setsebool -P allow_execstack=1
Comment 5 Daniel Rogowski 2007-10-12 07:27:39 UTC 
Ok, it works. But it's not the best thing to do, is it?
Comment 6 Daniel Walsh 2007-10-12 12:20:02 UTC 
Actually a better fix would be to 

chcon -t vmware_exec_t /usr/lib/vmware/bin/vmplayer
Comment 7 Daniel Walsh 2007-10-12 12:54:08 UTC 
Fixed in selinux-policy-2.6.4-49
Comment 8 Daniel Walsh 2008-01-30 19:06:41 UTC 
Bulk closing a old selinux policy bugs that were in the modified state.  If the
bug is still not fixed.  Please reopen.