Bug 187624 - selinux-policy-targeted denies java_vm libdeploy.so
Summary: selinux-policy-targeted denies java_vm libdeploy.so
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy-targeted
Version: 5
Hardware: i686
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Daniel Walsh
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2006-04-01 23:45 UTC by John Griffiths
Modified: 2007-11-30 22:11 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2006-05-05 15:01:12 UTC
Type: ---
Embargoed:

Attachments (Terms of Use)

Description John Griffiths 2006-04-01 23:45:00 UTC 
Description of problem:
libdeploy.so of jdk1.5.0_06/jre is denied execmod

Version-Release number of selected component (if applicable):


How reproducible:
100%

Steps to Reproduce:
1. Install java plugin in firefox
2. Load a page that runs a java aplet.
3.
  
Actual results:

Apr  1 16:25:31 gei kernel: audit(1143926724.607:7204): avc:  denied  { execmod
} for  pid=11628 comm="java_vm" name="libdeploy.so" dev=dm-0 ino=716039
scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0
tclass=file


Expected results:
No AVC message

Additional info:
Work around is
    chcon -t textrel_shlib_t /opt/jdk1.5.0_06/jre/lib/i386/libdeploy.so
Comment 1 Daniel Walsh 2006-04-03 15:49:33 UTC 
Fixed in selinux-policy-2.2.29-2.fc5
Comment 2 John Griffiths 2006-04-10 13:06:45 UTC 
This seems to be fixed in selinux-policy.noarch 0:2.2.29-4
Comment 4 Daniel Walsh 2006-05-05 15:01:12 UTC 
Closing as these have been marked as modified, for a while.  Feel free to reopen
if not fixed
Note You need to log in before you can comment on or make changes to this bug.