Bug 1019595 - SELinux is preventing /usr/lib64/xulrunner/plugin-container from 'execute' accesses on the file /home/smmc/pro_r/.mozilla/plugins/libflashplayer.so.
Summary: SELinux is preventing /usr/lib64/xulrunner/plugin-container from 'execute' ac...
Keywords:
Status: CLOSED INSUFFICIENT_DATA
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy
Version: 20
Hardware: x86_64
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Miroslav Grepl
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard: abrt_hash:e212075bf8a02e30fe5848e2a06...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2013-10-16 06:40 UTC by kuchiman
Modified: 2014-11-24 12:47 UTC (History)
5 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2014-11-24 12:47:33 UTC
Type: ---


Attachments (Terms of Use)

Description kuchiman 2013-10-16 06:40:20 UTC
Description of problem:
SELinux is preventing /usr/lib64/xulrunner/plugin-container from 'execute' accesses on the file /home/smmc/pro_r/.mozilla/plugins/libflashplayer.so.

*****  Plugin mozplugger (99.1 confidence) suggests   ************************

If you want to use the plugin package
Then необходимо отключить контроль SELinux для дополнительных модулей Firefox.
Do
# setsebool -P unconfined_mozilla_plugin_transition 0

*****  Plugin catchall (1.81 confidence) suggests   **************************

If вы считаете, что plugin-container следует разрешить доступ execute к libflashplayer.so file по умолчанию.
Then рекомендуется создать отчет об ошибке.
Чтобы разрешить доступ, можно создать локальный модуль политики.
Do
чтобы разрешить доступ, выполните:
# grep plugin-containe /var/log/audit/audit.log | audit2allow -M mypol
# semodule -i mypol.pp

Additional Information:
Source Context                unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c
                              0.c1023
Target Context                unconfined_u:object_r:user_home_t:s0
Target Objects                /home/smmc/pro_r/.mozilla/plugins/libflashplayer.s
                              o [ file ]
Source                        plugin-containe
Source Path                   /usr/lib64/xulrunner/plugin-container
Port                          <Неизвестно>
Host                          (removed)
Source RPM Packages           xulrunner-24.0-2.fc20.x86_64
Target RPM Packages           
Policy RPM                    selinux-policy-3.12.1-75.fc20.noarch
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Host Name                     (removed)
Platform                      Linux (removed) 3.11.4-302.fc20.x86_64 #1 SMP Fri
                              Oct 11 17:43:41 UTC 2013 x86_64 x86_64
Alert Count                   17
First Seen                    2013-10-15 17:49:18 SAMT
Last Seen                     2013-10-15 17:58:24 SAMT
Local ID                      7abafc41-bb82-488b-9188-16e10e1e6cd5

Raw Audit Messages
type=AVC msg=audit(1381845504.435:820): avc:  denied  { execute } for  pid=27091 comm="plugin-containe" path="/home/smmc/pro_r/.mozilla/plugins/libflashplayer.so" dev="sda3" ino=26311 scontext=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file


type=SYSCALL msg=audit(1381845504.435:820): arch=x86_64 syscall=mmap success=no exit=EACCES a0=0 a1=1560308 a2=5 a3=802 items=0 ppid=26594 pid=27091 auid=46603642 uid=46603642 gid=46600513 euid=46603642 suid=46603642 fsuid=46603642 egid=46600513 sgid=46600513 fsgid=46600513 ses=2 tty=(none) comm=plugin-containe exe=/usr/lib64/xulrunner/plugin-container subj=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 key=(null)

Hash: plugin-containe,mozilla_plugin_t,user_home_t,file,execute

Additional info:
reporter:       libreport-2.1.8
hashmarkername: setroubleshoot
kernel:         3.11.4-302.fc20.x86_64
type:           libreport

Potential duplicate: bug 827678

Comment 1 Daniel Walsh 2013-10-16 20:04:58 UTC
Why is your .mozilla directory in pro_r?  Is this your homedir?

Comment 2 djtr_2004 2014-03-18 11:27:39 UTC
Description of problem:
Installed CACkey libraries
placed libcackey.so into the security devices of Firefox ver 25
tried to read the certificates of my card by clicking on View Certificates in Firefox
gave the error message

Additional info:
reporter:       libreport-2.1.9
hashmarkername: setroubleshoot
kernel:         3.11.10-301.fc20.i686+PAE
type:           libreport


Note You need to log in before you can comment on or make changes to this bug.