Bug 162026 - selinux updated policies 1.17.30-3.13 released 27th June break crossover office 4.2 and mod_perl.so
selinux updated policies 1.17.30-3.13 released 27th June break crossover offi...
Status: CLOSED NEXTRELEASE
Product: Fedora
Classification: Fedora
Component: selinux-policy-targeted (Show other bugs)
3
i386 Linux
medium Severity medium
: ---
: ---
Assigned To: Daniel Walsh
:
Depends On:
Blocks:
  Show dependency treegraph
 
Reported: 2005-06-29 05:36 EDT by David
Modified: 2008-05-01 11:38 EDT (History)
0 users

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2005-07-03 20:49:24 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)

  None (edit)
Description David 2005-06-29 05:36:43 EDT
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.8) Gecko/20050513 Fedora/1.0.4-1.3.1 Firefox/1.0.4

Description of problem:
I applied the SElinux updates as released on 27th June 2005 using the taskbar up2date tool. Crossover office 4.2 now no-longer works. When I try to run an installed windows application I get the following in /var/log/messages

Jun 29 18:17:34 dhcppc0 kernel: audit(1120034854.440:0): avc:  denied
{ execmod } for  pid=4353 comm=wine-preloader
path=/opt/cxoffice/lib/wine/ntdll.dll.so dev=dm-0 ino=82386
scontext=user_u:system_r:unconfined_t tcontext=system_u:object_r:lib_t
tclass=file

And when trying to start cxoffice setup I get:

wine failed to initialise: /opt/cxoffice/lib/wine/ntdll.dll.so cannot
restore segment prot after reloc: Permission denied.

If I turn SElinux off with setenforce 0 then crossover office (and installed windows applications) work just fine.

There is also a boot up error that reports an error in line 10 of /etc/httd/conf.d/perl.conf - this line appears to be trying to load mod_perl.so Again I suspect SElinux is the cause of this error.

Version-Release number of selected component (if applicable):


How reproducible:
Always

Steps to Reproduce:
1.Click MS Word Icon
2.Wait
3.Check /var/logs/messages
  

Actual Results:  Word failed to load. 
/var/logs/messages contains:

Jun 29 18:17:34 dhcppc0 kernel: audit(1120034854.440:0): avc:  denied
{ execmod } for  pid=4353 comm=wine-preloader
path=/opt/cxoffice/lib/wine/ntdll.dll.so dev=dm-0 ino=82386
scontext=user_u:system_r:unconfined_t tcontext=system_u:object_r:lib_t
tclass=file

Expected Results:  MS Word (withing cxoffice) should have loaded.

Additional info:
Comment 1 Daniel Walsh 2005-07-03 11:21:23 EDT
Fixed in selinux-policy-targeted-1.17.30-3.16
Comment 2 David 2005-07-03 20:49:24 EDT
Confirmed - I applied the updates. They fix the problem. Thanks.

Note You need to log in before you can comment on or make changes to this bug.