Bug 682824

Summary:	SELinux reports a false positive execstack alert upon running firefox .
Product:	[Fedora] Fedora	Reporter:	Kostas Sfakiotakis <kostassf>
Component:	firefox	Assignee:	Gecko Maintainer <gecko-bugs-nobody>
Status:	CLOSED DUPLICATE	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	medium	Docs Contact:
Priority:	unspecified
Version:	14	CC:	dwalsh, gecko-bugs-nobody
Target Milestone:	---
Target Release:	---
Hardware:	x86_64
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2011-03-07 22:42:18 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:

Description Kostas Sfakiotakis 2011-03-07 17:17:49 UTC

User-Agent:       Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.14) Gecko/20110301 Fedora/3.6.14-1.fc14 Firefox/3.6.14

I am using firefox-3.6.14-1.fc14.x86_64 ans whenever i try to launch firefox i get an alert from SELinux that /usr/lib64/firefox-3.6/firefox attempted this access : execstack . The problem is that if i run the command execstack -q /usr/lib64/firefox-3.6/firefox  , execstack reports that the file in question doesn´t use the execstack bit . Trying to investigate a bit further neither does anyone of my libraries located in /lib64, /usr/lib  

Reproducible: Always

Steps to Reproduce:
1.Launch firefox 
2.
3.
Actual Results:  
Simply run firefox

Comment 1 Daniel Walsh 2011-03-07 22:42:18 UTC

It is a shared library that is marked with execstack flag, most likely.

*** This bug has been marked as a duplicate of bug 652297 ***