Bug 904469

Summary:	SELinux is preventing /home/ifrit/.local/share/Steam/SteamApps/common/Half-Life/hl_linux from using the 'execheap' accesses on a process.
Product:	[Fedora] Fedora	Reporter:	Ifrit <fedyapupkin>
Component:	selinux-policy	Assignee:	Miroslav Grepl <mgrepl>
Status:	CLOSED DUPLICATE	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	18	CC:	dominick.grift, dwalsh, john, mgrepl
Target Milestone:	---
Target Release:	---
Hardware:	x86_64
OS:	Unspecified
Whiteboard:	abrt_hash:4082a0b46657afa25ecb44659f5d1bd2517b83b37833cf81e0c37234728f862e
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2013-01-28 15:51:42 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Ifrit 2013-01-26 14:23:27 UTC

Description of problem:
I started Counter-Strike beta

Additional info:
hashmarkername: setroubleshoot
kernel:         3.7.2-204.fc18.x86_64
type:           libreport

Comment 1 Miroslav Grepl 2013-01-28 11:03:20 UTC

Could you try to resubmit the report together with AVC msg. Then the alert should tell you what to do in this report.

Comment 2 Daniel Walsh 2013-01-28 15:51:42 UTC

This seems like SteamFortress code is noit well written, for Linux

*** This bug has been marked as a duplicate of bug 904691 ***

Comment 3 John Drinkwater 2013-01-28 15:54:33 UTC

Not a dupe of #904691 TF2 & Half Life don’t share the same codebase.

This bug should help provide the AVC messages needed https://github.com/ValveSoftware/steam-for-linux/issues/946#issuecomment-12758498

type=AVC msg=audit(1359244146.352:92): avc: denied { execheap } for pid=2354 comm="hl_linux" scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=process

Comment 4 Daniel Walsh 2013-01-28 19:26:47 UTC

Well they probably share the same coding standard.  

Here is an explanation of the SELinux Memory Controls.

http://www.akkadia.org/drepper/selinux-mem.html