Bug 878690
| Summary: | SELinux is preventing /usr/lib64/xulrunner/plugin-container from 'create' accesses on the file settings.sxx. | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | nathury <nathury> | ||||||
| Component: | selinux-policy | Assignee: | Miroslav Grepl <mgrepl> | ||||||
| Status: | CLOSED WONTFIX | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||||
| Severity: | unspecified | Docs Contact: | |||||||
| Priority: | unspecified | ||||||||
| Version: | 17 | CC: | dominick.grift, dwalsh, mgrepl | ||||||
| Target Milestone: | --- | ||||||||
| Target Release: | --- | ||||||||
| Hardware: | x86_64 | ||||||||
| OS: | Unspecified | ||||||||
| Whiteboard: | abrt_hash:0877707ba91f4d23325047ff57195773f1af9186ee727365743f125240e96b77 | ||||||||
| Fixed In Version: | Doc Type: | Bug Fix | |||||||
| Doc Text: | Story Points: | --- | |||||||
| Clone Of: | Environment: | ||||||||
| Last Closed: | 2012-11-21 10:52:20 UTC | Type: | --- | ||||||
| Regression: | --- | Mount Type: | --- | ||||||
| Documentation: | --- | CRM: | |||||||
| Verified Versions: | Category: | --- | |||||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||||
| Embargoed: | |||||||||
| Attachments: |
|
||||||||
Created attachment 648948 [details]
File: type
Created attachment 648949 [details]
File: hashmarkername
You should not be running firefox as root, if you want to run in this mode you probably should be running in permissive mode. Running firefox as root is considered dangeraous. |
Additional info: libreport version: 2.0.18 kernel: 3.6.6-1.fc17.x86_64 description: :SELinux is preventing /usr/lib64/xulrunner/plugin-container from 'create' accesses on the file settings.sxx. : :***** Plugin catchall (100. confidence) suggests *************************** : :If cree que de manera predeterminada, plugin-container debería permitir acceso create sobre settings.sxx file. :Then debería reportar esto como un error. :Puede generar un módulo de política local para permitir este acceso. :Do :permita el acceso momentáneamente executando: :# grep plugin-containe /var/log/audit/audit.log | audit2allow -M mypol :# semodule -i mypol.pp : :Additional Information: :Source Context unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c : 0.c1023 :Target Context unconfined_u:object_r:admin_home_t:s0 :Target Objects settings.sxx [ file ] :Source plugin-containe :Source Path /usr/lib64/xulrunner/plugin-container :Port <Desconocido> :Host (removed) :Source RPM Packages xulrunner-16.0.2-1.fc17.x86_64 :Target RPM Packages :Policy RPM selinux-policy-3.10.0-159.fc17.noarch :Selinux Enabled True :Policy Type targeted :Enforcing Mode Enforcing :Host Name (removed) :Platform Linux (removed) 3.6.6-1.fc17.x86_64 #1 SMP Mon Nov : 5 21:59:35 UTC 2012 x86_64 x86_64 :Alert Count 81 :First Seen 2012-11-20 17:50:44 CST :Last Seen 2012-11-20 18:06:57 CST :Local ID a5cd2599-f8a3-4381-ac5b-e3fdece63dc2 : :Raw Audit Messages :type=AVC msg=audit(1353456417.319:238): avc: denied { create } for pid=1618 comm="plugin-containe" name="settings.sxx" scontext=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:admin_home_t:s0 tclass=file : : :type=SYSCALL msg=audit(1353456417.319:238): arch=x86_64 syscall=open success=no exit=EACCES a0=7f6e0f041098 a1=442 a2=1b6 a3=776f6c items=0 ppid=1487 pid=1618 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm=plugin-containe exe=/usr/lib64/xulrunner/plugin-container subj=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 key=(null) : :Hash: plugin-containe,mozilla_plugin_t,admin_home_t,file,create : :audit2allow : :#============= mozilla_plugin_t ============== :allow mozilla_plugin_t admin_home_t:file create; : :audit2allow -R : :#============= mozilla_plugin_t ============== :allow mozilla_plugin_t admin_home_t:file create; :