Bug 836375

Summary: nspluginwrapper/SELinux
Product: [Fedora] Fedora Reporter: Robert S. <arcstrait>
Component: firefoxAssignee: Martin Stransky <stransky>
Status: CLOSED INSUFFICIENT_DATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 17CC: gecko-bugs-nobody, stransky
Target Milestone: ---Keywords: SELinux
Target Release: ---   
Hardware: i686   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-04-18 13:08:40 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Robert S. 2012-06-28 21:11:24 UTC
Description of problem:

npviewer.bin does not appear to have permission to have setattr access on the at-spi2 directory.

Version-Release number of selected component (if applicable):

Firefox 12.0

How reproducible:

Should be very reproducible.


Steps to Reproduce:

Will try to assist:

1. Event triggered after Firefox crashed.

2. So we restarted the system and Firefox loyally asked what tabs to pursue reclaiming.

3. We pick the tabs to reclaim. And this error message was not in reference to explicit tab (another bug!), so we have no clue what it meant. We have a document up with Google Docs and one up by way of a Java applet. Any other page, including Gmail, ought to stand on its own as a typical HTML page.
  
Actual results:


Expected results:

Determine if setting the attributes of the file in question is a security risk and then proceed to find out whether Firefox should be messing with at-spi2 file. Either the answer would be should - shouldn't - or let the user decide. But I don't have enough information to make that decision, although the SELinux Alert specified how to allow the access.

So SELinux recommends reporting this as a bug. So that's what I think needs to be improved on Firefox.

Additional info:


Not knowing what npviewer.bin were supposed to do, we can't exactly devise a way to reproduce this unless we take steps to lock up Firefox again. Really, all you need to do to lock up Firefox is to access Google Images and let them load while a lot of tabs remain open. Then the tabs pretty much want to ignore any command to close them (another bug!)

Comment 1 Martin Stransky 2012-07-31 13:53:25 UTC
Please remove the nspluginwrapper package, you don't need it unless you use adobe reader plugin.

Comment 2 Martin Stransky 2012-07-31 13:57:08 UTC
*** Bug 836384 has been marked as a duplicate of this bug. ***

Comment 3 Martin Stransky 2012-09-12 11:25:30 UTC
Anyway, what plugin is run by npviewer.bin?