Description of problem: 1. Open a Word Document from web with libreoffice plugin in firefox. (http://ktf.cuni.cz/~sprunk/old/Problem%20zla%20u%20Leibnize.doc) 2 The Document is open in Firefox window 3 I am unable to save it do my disk with Save as... button. 3.1 When I click Save as... button, the save dialog appears 3.2 I choose the file name and location a click Save. 3.3 Error message is displayed: Unable to save file: "<<filename>>":<<path>><<filename>> does not exist. 4 I am unable to Save document after clicking on Edit button in Firefox. The document opens in a new LibreOffice window, but when I want to save it (steps 3.1, 3.2, 3.3), the same error message is shown. SELinux is preventing /usr/lib64/libreoffice/program/soffice.bin from 'create' accesses on the file . ***** Plugin mozplugger (99.1 confidence) suggests ************************ If you want to use the plugin package Then you must turn off SELinux controls on the Firefox plugins. Do # setsebool -P unconfined_mozilla_plugin_transition 0 ***** Plugin catchall (1.81 confidence) suggests ************************** If you believe that soffice.bin should be allowed create access on the file by default. Then you should report this as a bug. You can generate a local policy module to allow this access. Do allow this access for now by executing: # grep soffice.bin /var/log/audit/audit.log | audit2allow -M mypol # semodule -i mypol.pp Additional Information: Source Context unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c 0.c1023 Target Context unconfined_u:object_r:user_home_t:s0 Target Objects [ file ] Source soffice.bin Source Path /usr/lib64/libreoffice/program/soffice.bin Port <Unknown> Host (removed) Source RPM Packages libreoffice-core-4.2.3.3-9.fc20.x86_64 Target RPM Packages Policy RPM selinux-policy-3.12.1-158.fc20.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name (removed) Platform Linux (removed) 3.14.2-200.fc20.x86_64 #1 SMP Mon Apr 28 14:40:57 UTC 2014 x86_64 x86_64 Alert Count 7 First Seen 2014-03-06 22:00:27 CET Last Seen 2014-05-17 09:22:13 CEST Local ID 19d1f7de-0ddd-4475-b05b-98104bcd761b Raw Audit Messages type=AVC msg=audit(1400311333.9:443): avc: denied { create } for pid=2236 comm="soffice.bin" name=50726F626C656D207A6C612075204C6569626E697A652E646F63 scontext=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file type=SYSCALL msg=audit(1400311333.9:443): arch=x86_64 syscall=open success=no exit=EACCES a0=7fffcc8d1280 a1=c2 a2=1b6 a3=0 items=0 ppid=2222 pid=2236 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=1 comm=soffice.bin exe=/usr/lib64/libreoffice/program/soffice.bin subj=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 key=(null) Hash: soffice.bin,mozilla_plugin_t,user_home_t,file,create Additional info: reporter: libreport-2.2.2 hashmarkername: setroubleshoot kernel: 3.14.2-200.fc20.x86_64 type: libreport Potential duplicate: bug 855841
Created attachment 896543 [details] File: Snímka obrazovky z 2014-05-17 09:36:43.png
If you are going to run openoffice as a plugin you will have to disable the enforcement. ***** Plugin mozplugger (99.1 confidence) suggests ************************ If you want to use the plugin package Then you must turn off SELinux controls on the Firefox plugins. Do # setsebool -P unconfined_mozilla_plugin_transition 0 Of if you want the confinement, remove the mozplugger package.