Bug 430218
Summary: | Firefox triggers AVC denial for exec stack when installing extensions | ||
---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Andrew Farris <lordmorgul> |
Component: | firefox | Assignee: | Gecko Maintainer <gecko-bugs-nobody> |
Status: | CLOSED NOTABUG | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
Severity: | low | Docs Contact: | |
Priority: | low | ||
Version: | rawhide | CC: | dwalsh, mcepl |
Target Milestone: | --- | Keywords: | SELinux |
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | Bug Fix | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2008-01-26 00:01:07 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Andrew Farris
2008-01-25 11:51:08 UTC
Ok it could be flash's fault: LoadPlugin: failed to initialize shared library /home/lordmorgul/.mozilla/plugins/libflashplayer.so [/home/lordmorgul/.mozilla/plugins/libflashplayer.so: cannot enable executable stack as shared object requires: Permission denied] Noticed bug# 215424 and this may be the same issue though, since a totem realplayer plugin is also installed. Ok, removed totem-mozplugin and it no longer shows up in the list, flash still causes the same denial. Shockwave Flash File name: nswrapper_32_32.libswfdecmozilla.so Shockwave Flash 9.0 r100 Could you remove the flash in your /home directory and reinstall with "Yum option" (according to http://www.adobe.com/shockwave/download/download.cgi?P1_Prod_Version=ShockwaveFlash) from the proper Adobe repository? Does it help? I am not sure how much SELinux likes programs in /home. Dan? -> ls -al /home/lordmorgul/.mozilla/plugins -rw-r----- 1 lordmorgul lordmorgul 856 2005-05-16 01:02 flashplayer.xpt -rwxr-x--- 1 lordmorgul lordmorgul 2096844 2005-05-16 01:02 libflashplayer.so Wow.. sorry my mistake. That is an old flash lib. This is a home thats migrated since RHL (through many rawhide cycles) but I try to make sure this sort of thing is cleaned before reporting something like this, and I migrate as little as possible. For some reason this file just started taking loading precedence, maybe because I changed firefox profiles around. (I did have system wide flash installed, but I just refreshed it, removed the home file, and it all works) I'm sure selinux was doing exactly what it should have been doing here. |