When I run rpm --verify selinux-policy-targeted, it reports: S.5....T /etc/selinux/targeted/contexts/files/file_contexts.homedirs When I examine this file, I see entries for libflashplayer.so, which makes me suspect that the file was updated somehow when I installed flash, and that this was a correct update. The rpm --verify output doesn't make it clear that this file is allowed to be dynamically updated as a result of installs of subsequent packages. Should it be listed with a "c" to show that it's a config file?
Maybe this is related. When I browse a webpage with flash images, Firefox freeze. In /var/log messages: localhost kernel: audit(1117814713.345:6): avc: denied { execmod } for pid=3252 comm="firefox-bin" name=libflashplayer.so dev=hda6 ino=327319 scontext=user_u:system_r:unconfined_t tcontext=user_u:object_r:default_t tclass=file
The first problem requires a fix in the spec file to make it config. It will show up in the next release. The second problem is a labeling problem. selinux-policy-targeted-1.23.18-1 restorecon libflashplayer.so