Bug 430163

Summary:	SELinux is preventing /opt/openoffice.org2.3/program/soffice.bin from loading /opt/openoffice.org2.3/program/libvclplug_gen680li.so.1.1
Product:	[Fedora] Fedora	Reporter:	Surya Kompalli <neosurya>
Component:	openoffice.org	Assignee:	Caolan McNamara <caolanm>
Status:	CLOSED CANTFIX	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	low	Docs Contact:
Priority:	low
Version:	7	CC:	jnavrati
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2008-01-24 23:07:13 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Surya Kompalli 2008-01-24 21:55:22 UTC

Description of problem:
SELinux is preventing /opt/openoffice.org2.3/program/soffice.bin from loading
/opt/openoffice.org2.3/program/libvclplug_gen680li.so.1.1 which requires text
relocation.

Version-Release number of selected component (if applicable):
selinux-policy-2.6.4-8.fc7
openoffice.org2.3.1

How reproducible:
Starting OpenOffice without having jdk and without following command: 
chcon -t textrel_shlib_t /opt/openoffice.org2.3/program/libvclplug_gen680li.so.1.1

Steps to Reproduce:
1.
2.
3.
  
Actual results:
The /opt/openoffice.org2.3/program/soffice.bin application attempted to load
/opt/openoffice.org2.3/program/libvclplug_gen680li.so.1.1 which requires text
relocation. This is a potential security problem. Most libraries do not need
this permission. Libraries are sometimes coded incorrectly and request this
permission. The SELinux Memory Protection Tests web page explains how to remove
this requirement. You can configure SELinux temporarily to allow
/opt/openoffice.org2.3/program/libvclplug_gen680li.so.1.1 to use relocation as a
workaround, until the library is fixed. Please file a bug report against this
package.


The following command will allow this access:chcon -t textrel_shlib_t
/opt/openoffice.org2.3/program/libvclplug_gen680li.so.1.1

Openoffice works fine after this command. 

Expected results:
Openoffice should run normally. 


Additional info:

Comment 1 Caolan McNamara 2008-01-24 23:07:13 UTC

/opt/openoffice.org2.3/ ... is *NOT* where my rpms go. Logging against the
openoffice.org component of our rpms is totally bogus. Either use the fedora
provided openoffice.org rpms, or log the bug directly against selinux-targeted.