Bug 121690 - Flash plugin for Mozilla stops working when in enforcing mode
Summary: Flash plugin for Mozilla stops working when in enforcing mode
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: policy
Version: rawhide
Hardware: i386
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Daniel Walsh
QA Contact: Ben Levenson
URL: www.planeshift.it
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2004-04-25 22:02 UTC by Jacob Kroon
Modified: 2007-11-30 22:10 UTC (History)
1 user (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2004-06-14 21:10:25 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Jacob Kroon 2004-04-25 22:02:18 UTC
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.6)
Gecko/20040422 Epiphany/1.1.12

Description of problem:
When in enforcing mode, running Mozilla/Epiphany with the latest Flash
plugin version (6.0.81.0) stops working. If I run "setenforce 0" it
works again. I've included some output information for the
flash-files. I only tried installing the plugin locally in my home
directory.

Version-Release number of selected component (if applicable):
policy-1.11.2-18

How reproducible:
Always

Steps to Reproduce:
1. Install Flash-plugin
(http://fpdownload.macromedia.com/pub/shockwave/flash/english/linux/6.0r81/install_flash_player_6_linux.tar.gz)
2. Start Mozilla/Epiphany
3. Visit website with flash.
    

Actual Results:  Plugin doesn't get detected, "about:plugins" yields
nothing.

Expected Results:  Flash should be played, and "about:plugins" should
list the plugin as detected.

Additional info:

Relevant "dmesg" output:

audit(1082929676.973:0): avc:  denied  { execute } for  pid=2026
path=/home/jacob/.mozilla/plugins/libflashplayer.so dev=hda2
ino=245798 scontext=user_u:user_r:user_t
tcontext=system_u:object_r:user_mozilla_rw_t tclass=file

"ls -lZ" in plugin dir output:

-rwxr-xr-x+ jacob    jacob    system_u:object_r:user_mozilla_rw_t
flashplayer.xpt
-rwxr-xr-x+ jacob    jacob    system_u:object_r:user_mozilla_rw_t
libflashplayer.so

Comment 1 Jacob Kroon 2004-04-26 18:19:32 UTC
I actually solved this in an ugly temporary way, by placing the
flash-files in my $HOME/temp, and then creating symlinks to these
files in $HOME/.mozilla/plugins/

Comment 2 Daniel Walsh 2004-04-28 19:20:12 UTC
/usr/bin/epiphany-bin	--	system_u:object_r:mozilla_exec_t

needs to be added to file context.  I will add it to next policy.

chcon -t mozilla_exec_t /usr/bin/epiphany-bin

Dan


Note You need to log in before you can comment on or make changes to this bug.