Bug 533715

Summary: SELinux is preventing /usr/bin/amarok from making the program stack executable.
Product: [Fedora] Fedora Reporter: A S Alam <aalam>
Component: amarokAssignee: Rex Dieter <rdieter>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: medium    
Version: 12CC: aalam, dwalsh, fedora, mgrepl, mshao, par.aronsson, rdieter, smparrish
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard: setroubleshoot_trace_hash:85c3675e18990a9b3d4aa76847d2596681f3307f8944fd58af65d3e302be2683
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2009-11-10 13:50:23 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description A S Alam 2009-11-08 18:29:48 UTC
Hash String generated from  selinux-policy-3.6.32-41.fc12,allow_execstack,amarok,unconfined_t,unconfined_t,process,execstack
audit2allow suggests:

Comment 1 Daniel Walsh 2009-11-09 20:32:10 UTC
There is no reason that amarok should need this priv.

A S Alam, could you attach the full output from the sealert.

amarok should not need execstack.

You are not running with nvidia drivers are you?

Comment 2 Rex Dieter 2009-11-09 20:56:01 UTC
And what kinds of audio files are you trying to play here?  
What phonon backend? 
what extra codecs do you have installed, if any?

Comment 3 A S Alam 2009-11-10 01:16:59 UTC
it was WMA file with extra codecs (from rpmfusion) (xine-lib-extras-freeworld)

Comment 4 Rex Dieter 2009-11-10 12:50:33 UTC
ok I'll see if I can reproduce, do the denials occur with any/all wma files?

Comment 5 Daniel Walsh 2009-11-10 13:02:31 UTC
Can you see if the execstack flag is set by executing execstack -q on the shared libraries.  If one is set, try to clear it with execstack -c and see if the audio still works.  And  see if the AVC dissapears.

Comment 6 Rex Dieter 2009-11-10 13:31:06 UTC
I can't reproduce.

Comment 7 Daniel Walsh 2009-11-10 13:50:23 UTC

*** This bug has been marked as a duplicate of bug 533987 ***