Bug 469850

Summary: semanage does not have the rights to fix reloc failure in libjvm.so
Product: [Fedora] Fedora Reporter: ghherlin
Component: selinux-policyAssignee: Daniel Walsh <dwalsh>
Status: CLOSED CANTFIX QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: low Docs Contact:
Priority: medium    
Version: rawhideCC: dwalsh, jkubin, mgrepl
Target Milestone: ---   
Target Release: ---   
Hardware: i686   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2008-11-04 13:55:34 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
initial selinux report with suggestions that fail none

Description ghherlin 2008-11-04 13:22:10 UTC 
Created attachment 322420 [details]
initial selinux report with suggestions that fail

Description of problem:

semanage does not have the se-policy rights to change the roghts to permitcorrect execution of libjvm.so
(semanage fcontext -a -t textrel_shlib_t '/opt/jdk1.6.0_10/jre/lib/i386/server/libjvm.so')



Version-Release number of selected component (if applicable): FC10Snap3


How reproducible:




Steps to Reproduce:
Install Sun's  1.6.0_10 JDKas describen in http://fedorasolved.org/browser-solutions/java-i386
Start Opera.
selinux comes up with the relocation failure message attached.
Attempt the suggested authorization mantras.
  
Actual results:
see attached selinux troubleshooting output files.files


Expected results:
success of the (last) semanage step.


Additional info:
Comment 1 Daniel Walsh 2008-11-04 13:55:34 UTC 
Just run restorecon on the library it should be labeled correctly the problem is you installed it from a non rpm so it did not label the file correctly

restorecon -R -v /opt