Bug 189622 - (SELinux denial) Flash Player 7 uses text relocations
Summary: (SELinux denial) Flash Player 7 uses text relocations
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat Enterprise Linux 4
Classification: Red Hat
Component: flash-plugin
Version: 4.0
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
: ---
Assignee: Warren Togami
QA Contact:
URL:
Whiteboard:
: 207621 222100 (view as bug list)
Depends On:
Blocks: flash_el4
TreeView+ depends on / blocked
 
Reported: 2006-04-21 18:31 UTC by Warren Togami
Modified: 2007-11-30 22:07 UTC (History)
8 users (show)

Fixed In Version: flash-plugin-9.0.31.0
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2007-04-17 17:32:07 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Warren Togami 2006-04-21 18:31:41 UTC
libflashplayer.so (7.0.63 and earlier) uses text relocations.  Text relocations
will soon be disallowed by selinux policies because it is a security risk.

Possible causes of text relocations:
1) Some code was not compiled with -fpic.
2) Hand written asm code that is not position independent.
3) Some compiler toolchain bug (possibly Bug #175442).

Ulrich Drepper recommends that Macromedia try FC5 as a development platform
because it contains the latest gcc and related compiling toolchains.  FC5
contains eu-findtextrel, whihc can aid in locating these problems.

Comment 1 Warren Togami 2006-06-26 21:34:38 UTC
There are two temporary workarounds for this problem for Fedora users, as we
wait for the next release of Flash Player that fixes this issue:

1) chcon -t textrel_shlib_t libflashplayer.so
   Do this on the file manually after Firefox has downloaded it to your home
directory.
2) http://macromedia.mplug.org/
   Use the flash-plugin RPM instead.

Comment 3 Michael Tilburg 2006-10-23 18:06:48 UTC
This is fixed in Flash Player 9 beta here:

http://labs.adobe.com/downloads/flashplayer9.html


Comment 4 Warren Togami 2007-01-10 20:20:39 UTC
Until Flash Player 9 is released, you can workaround this selinux denial problem
by using the Flash 7 RPM from:
http://macromedia.mplug.org/

Comment 5 Warren Togami 2007-01-10 20:26:10 UTC
*** Bug 222100 has been marked as a duplicate of this bug. ***

Comment 6 Warren Togami 2007-01-10 20:26:12 UTC
*** Bug 207621 has been marked as a duplicate of this bug. ***


Note You need to log in before you can comment on or make changes to this bug.