Bug 527079
Summary: | setroubleshoot: SELinux is preventing /usr/bin/arora from changing a writable memory segment executable. | ||
---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Jaroslav Reznik <jreznik> |
Component: | qt | Assignee: | Than Ngo <than> |
Status: | CLOSED ERRATA | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
Severity: | medium | Docs Contact: | |
Priority: | medium | ||
Version: | rawhide | CC: | drepper, dwalsh, jreznik, kevin, ltinkl, mgrepl, rdieter, than |
Target Milestone: | --- | ||
Target Release: | --- | ||
Hardware: | i386 | ||
OS: | Linux | ||
Whiteboard: | setroubleshoot_trace_hash:c7c5f41d476e195e38d5819150e64489fb40dc05bf4378c06440e7fa2feb5ff1 | ||
Fixed In Version: | 4.5.3-7.fc10 | Doc Type: | Bug Fix |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2009-11-04 12:03:59 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Jaroslav Reznik
2009-10-04 07:57:12 UTC
Arora should not need this priv. *** Bug 527080 has been marked as a duplicate of this bug. *** *** Bug 527081 has been marked as a duplicate of this bug. *** Hi Dan, could you provide some hints what could I do with this issue? Thanks. Well first what is arora written in? What does it do? This explains what execmem means. http://people.redhat.com/~drepper/selinux-mem.html It's a Qt WebKit browser written in C++, it should not do any low level operations which are not done by Qt or WebKit itself. I've checked the link and I don't have a clue where to look. Any guide to SE Linux debugging? Uli any ideas? This is probably the WebKit JavaScript JIT (Squirrelfish Extreme). It got recently disabled in WebKitGtk because of this, I guess QtWebKit has the same problem. Thanks Kevin, the bug for WebKitGtk is this one https://bugzilla.redhat.com/show_bug.cgi?id=516057 I'm reassigning this bug to Qt as we should fix it in Qt too (JIT disable workaround for now?). Not closing as duplicate as it belongs to other component but we should track WKG bug. qt-4.5.3-4.fc11 has been submitted as an update for Fedora 11. http://admin.fedoraproject.org/updates/qt-4.5.3-4.fc11 qt-4.5.3-4.fc10 has been pushed to the Fedora 10 testing repository. If problems still persist, please make note of it in this bug report. If you want to test the update, you can install it with su -c 'yum --enablerepo=updates-testing update qt'. You can provide feedback for this update here: http://admin.fedoraproject.org/updates/F10/FEDORA-2009-10447 qt-4.5.3-4.fc11 has been pushed to the Fedora 11 testing repository. If problems still persist, please make note of it in this bug report. If you want to test the update, you can install it with su -c 'yum --enablerepo=updates-testing update qt'. You can provide feedback for this update here: http://admin.fedoraproject.org/updates/F11/FEDORA-2009-10462 qt-4.5.3-7.fc11 has been pushed to the Fedora 11 stable repository. If problems still persist, please make note of it in this bug report. qt-4.5.3-7.fc10 has been pushed to the Fedora 10 stable repository. If problems still persist, please make note of it in this bug report. |