Bug 1334085 - SELinux is preventing teamviewerd from using the 'execmem' accesses on a process.
Summary: SELinux is preventing teamviewerd from using the 'execmem' accesses on a proc...
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy
Version: 24
Hardware: x86_64
OS: Unspecified
medium
medium
Target Milestone: ---
Assignee: Miroslav Grepl
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard: abrt_hash:40553c3c8832ca6c55b5ed38e4c...
: 1371281 1377122 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-05-08 06:44 UTC by Mikhail
Modified: 2016-10-22 08:31 UTC (History)
28 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2016-07-27 21:30:54 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Mikhail 2016-05-08 06:44:24 UTC
Description of problem:
SELinux is preventing teamviewerd from using the 'execmem' accesses on a process.

*****  Plugin catchall (100. confidence) suggests   **************************

If you believe that teamviewerd should be allowed execmem access on processes labeled init_t by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# ausearch -c teamviewerd --raw | audit2allow -M mypol
# semodule -i mypol.pp

Additional Information:
Source Context                system_u:system_r:init_t:s0
Target Context                system_u:system_r:init_t:s0
Target Objects                Unknown [ process ]
Source                        teamviewerd
Source Path                   teamviewerd
Port                          <Unknown>
Host                          (removed)
Source RPM Packages           
Target RPM Packages           
Policy RPM                    selinux-policy-3.13.1-184.fc24.noarch
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Host Name                     (removed)
Platform                      Linux (removed) 4.5.3-300.fc24.x86_64 #1 SMP Thu
                              May 5 01:56:27 UTC 2016 x86_64 x86_64
Alert Count                   60
First Seen                    2016-05-05 00:14:28 YEKT
Last Seen                     2016-05-08 10:58:40 YEKT
Local ID                      69c79705-490c-4367-8f47-0d28e7c70f9e

Raw Audit Messages
type=AVC msg=audit(1462687120.296:386): avc:  denied  { execmem } for  pid=2013 comm="teamviewerd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=process permissive=0


Hash: teamviewerd,init_t,init_t,process,execmem

Version-Release number of selected component:
selinux-policy-3.13.1-184.fc24.noarch

Additional info:
reporter:       libreport-2.7.0
hashmarkername: setroubleshoot
kernel:         4.5.3-300.fc24.x86_64
reproducible:   Not sure how to reproduce the problem
type:           libreport

Comment 1 Miroslav Grepl 2016-05-09 06:06:34 UTC
What does

$ rpm -qf `which teamviewerd`

Comment 2 Mikhail 2016-05-09 07:30:38 UTC
rpm -qf `which teamviewerd`
which: no teamviewerd in (/usr/lib64/qt-3.3/bin:/usr/local/bin:/usr/local/sbin:/usr/bin:/usr/sbin)
rpm: no arguments given for query

Comment 3 Rafael Rodrigues 2016-06-22 15:59:09 UTC
Description of problem:
Apos instalar o TeamViewer apresenta o seguinte errona solução de problemas do selinux

SELinux is preventing teamviewerd from using the execmem access on a process.

Plugin: catchall 
you want to allow teamviewerd to have execmem access on the Unknown processSevocê acredita que o teamviewerd deva ser permitido o acesso de execmem em processos com rótulo init_t por default.
Você deve informar que este é um erro.
Você pode gerar um módulo de política local para permitir este acesso.
Allow this access for now by executing:
# ausearch -c 'teamviewerd' --raw | audit2allow -M my-teamviewerd
# semodule -X 300 -i my-teamviewerd.pp

Version-Release number of selected component:
selinux-policy-3.13.1-190.fc24.noarch

Additional info:
reporter:       libreport-2.7.1
hashmarkername: setroubleshoot
kernel:         4.5.7-300.fc24.x86_64
reproducible:   Not sure how to reproduce the problem
type:           libreport

Comment 4 Christophe GERARDIN 2016-06-22 18:56:29 UTC
Description of problem:
1) Download and open https://download.teamviewer.com/download/teamviewer.i686.rpm
2) Click the "Install" button

Version-Release number of selected component:
selinux-policy-3.13.1-190.fc24.noarch

Additional info:
reporter:       libreport-2.7.1
hashmarkername: setroubleshoot
kernel:         4.5.7-300.fc24.x86_64
reproducible:   Not sure how to reproduce the problem
type:           libreport

Comment 5 Rafael Rodrigues 2016-06-23 23:40:25 UTC
working, thank you!

Comment 6 geigor 2016-07-25 09:10:18 UTC
Description of problem:
After upgrading from FC21 to FC24 (via dnf), teamviewer doesn't start automatically at system login, even though daemon is loaded and is running;
I've tried to change SElinux policy for teamviewer but still doesn't load 

Version-Release number of selected component:
selinux-policy-3.13.1-191.5.fc24.noarch

Additional info:
reporter:       libreport-2.7.2
hashmarkername: setroubleshoot
kernel:         4.6.4-301.fc24.x86_64
type:           libreport

Comment 7 OoZooL 2016-07-26 13:11:21 UTC
Description of problem:
TeamViewer Daemon caused it no doubt...

Version-Release number of selected component:
selinux-policy-3.13.1-191.5.fc24.noarch

Additional info:
reporter:       libreport-2.7.2
hashmarkername: setroubleshoot
kernel:         4.6.3-300.fc24.x86_64+debug
type:           libreport

Comment 8 Lukas Vrabec 2016-07-27 21:30:54 UTC
Tiemviewer is not part of Fedora repos. Closing as WONTFIX. Solution here is to write policy for teamviewer daemon.

Comment 9 vihochiamatiamici 2016-08-01 16:14:59 UTC
Description of problem:
just starting gnome session


Additional info:
reporter:       libreport-2.7.2
hashmarkername: setroubleshoot
kernel:         4.6.4-301.fc24.x86_64
type:           libreport

Comment 10 Edgar Subia 2016-08-08 20:36:19 UTC
Description of problem:
i install the program very good and unknow this problem

Version-Release number of selected component:
selinux-policy-3.13.1-191.8.fc24.noarch

Additional info:
reporter:       libreport-2.7.2
hashmarkername: setroubleshoot
kernel:         4.6.4-301.fc24.x86_64
type:           libreport

Comment 11 alfioguzzetta 2016-08-11 22:44:51 UTC
Description of problem:
Este error me sucedió cuando actualicé desde Fedora 23 al 24. El programa Teamviewer siempre lo ocupo para acseder de forma remota a otro equipo pero que esta vez me arroja un error con el inicio del demonio del servicio y no sé como solucionarlo. Yo uso la versión 11 de Teamviewer y he visto que anteriormente ya ha presentado el mismo problema.

Version-Release number of selected component:
selinux-policy-3.13.1-191.8.fc24.noarch

Additional info:
reporter:       libreport-2.7.2
hashmarkername: setroubleshoot
kernel:         4.6.5-300.fc24.x86_64
type:           libreport

Comment 12 Alan Kusov 2016-08-16 16:42:09 UTC
Description of problem:
Starting Teamviewer. No way. (

Version-Release number of selected component:
selinux-policy-3.13.1-191.10.fc24.noarch

Additional info:
reporter:       libreport-2.7.2
hashmarkername: setroubleshoot
kernel:         4.6.5-300.fc24.x86_64
type:           libreport

Comment 13 42Franz 2016-08-21 09:59:15 UTC
Description of problem:
Bonjour,
J'ai téléchargé le logiel teamviewer_11.0.57095.i686 en rpm sur le site officiel.
Après installation, le logiciel ne veut pas se lancer et créé une erreur.
Je ne peux pas le désinstaller non plus.
La désinstallation est possible mais ne se fait pas.
J'ai éssayé de réinstaller mais j'ai une erreur: Teamviewer est déjà installé.
Je viens d'essayer de désinstaller par Yum mais il ne trouve pas le programme (Aucune correspondance pour l'argument).
Si vous avez une solution, elle sera la bienvenue.
Merci pour votre aide.
A+
Franz

Version-Release number of selected component:
selinux-policy-3.13.1-191.12.fc24.noarch

Additional info:
reporter:       libreport-2.7.2
hashmarkername: setroubleshoot
kernel:         4.6.6-300.fc24.x86_64
type:           libreport

Comment 14 Damon Hill 2016-08-29 19:20:51 UTC
*** Bug 1371281 has been marked as a duplicate of this bug. ***

Comment 15 Vango Stavro 2016-09-11 10:56:14 UTC
Description of problem:
I simply opened Google chrome and SELinux alert popped up

Version-Release number of selected component:
selinux-policy-3.13.1-191.14.fc24.noarch

Additional info:
reporter:       libreport-2.7.2
hashmarkername: setroubleshoot
kernel:         4.7.2-201.fc24.x86_64
type:           libreport

Comment 16 Swapnil 2016-09-18 18:18:37 UTC
*** Bug 1377122 has been marked as a duplicate of this bug. ***

Comment 17 jim.ba.br 2016-09-23 03:40:07 UTC
Description of problem:
Na Instalação do Team Viewer.

Version-Release number of selected component:
selinux-policy-3.13.1-190.fc24.noarch

Additional info:
reporter:       libreport-2.7.1
hashmarkername: setroubleshoot
kernel:         4.5.5-300.fc24.x86_64
reproducible:   Not sure how to reproduce the problem
type:           libreport


Note You need to log in before you can comment on or make changes to this bug.