Bug 181601 - firefox ssl still broken in enforcing mode
Summary: firefox ssl still broken in enforcing mode
Keywords:
Status: CLOSED DUPLICATE of bug 180726
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy-targeted
Version: rawhide
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Daniel Walsh
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2006-02-15 03:42 UTC by Dave Jones
Modified: 2015-01-04 22:25 UTC (History)
3 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2006-02-15 04:52:58 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)
firefox dialog on startup (14.00 KB, image/png)
2006-02-15 03:42 UTC, Dave Jones
no flags Details

Description Dave Jones 2006-02-15 03:42:03 UTC
I though this got fixed a few weeks back.
I did a fresh install (not upgrade) of the latest tree, and tried starting
firefox, and got the attached dialog.

here's what ended up in dmesg..

audit(1139975061.034:105): avc:  denied  { execstack } for  pid=3276
comm="firefox-bin" scontext=user_u:system_r:unconfined_t:s0
tcontext=user_u:system_r:unconfined_t:s0 tclass=process

Firefox then starts up, but SSL browsing is impossible.

Comment 1 Dave Jones 2006-02-15 03:42:03 UTC
Created attachment 124664 [details]
firefox dialog on startup

Comment 2 Daniel Walsh 2006-02-15 04:17:48 UTC
The question is why does firefox need execstack to do SSL Browsing?  Is this
really necessary or is this a problem in the library?  We can mask the problem
by allowing firefox execstack, but is that what we want?

Comment 3 Christopher Aillon 2006-02-15 04:52:58 UTC

*** This bug has been marked as a duplicate of 180726 ***


Note You need to log in before you can comment on or make changes to this bug.