Bug 314281 - SELinux blocks AdobeReader 8 Browser Plugin
Summary: SELinux blocks AdobeReader 8 Browser Plugin
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Red Hat Enterprise Linux 5
Classification: Red Hat
Component: selinux-policy-targeted
Version: 5.0
Hardware: i686
OS: Linux
low
high
Target Milestone: ---
: ---
Assignee: Daniel Walsh
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2007-10-01 17:50 UTC by Heiko Adams
Modified: 2007-11-30 22:07 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2007-10-01 20:19:44 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Heiko Adams 2007-10-01 17:50:50 UTC
Description of problem:
The SELinux policies shipped with RHEL 5 are preventing the Adobe Reader 8
browserplugin from being loaded.

Version-Release number of selected component (if applicable):
selinux-policy-targeted-2.4.6-30.el5
AdobeReader_enu-8.1.1-1

How reproducible:
allways

Steps to Reproduce:
1. Install Adobe Reader 8
2. Start Firefox from a shell
3. Navigate to about:plugins
  
Actual results:
LoadPlugin: failed to initialize shared library
/opt/Adobe/Reader8/Browser/intellinux/nppdf.so
[/opt/Adobe/Reader8/Browser/intellinux/nppdf.so: Kann den Segment-Schutz nach
der Relozierung nicht wieder herstellen: Keine Berechtigung]

Expected results:
The plugin should be loaded without any interception of selinux

Additional info:
The problem was discovered on a CentOS 5 System but it should even affect RHEL 5
systems too.

Comment 1 Daniel Walsh 2007-10-01 20:19:44 UTC
We have never seen this package installed in this location.

You can fix this by executing the following commands

semanage fcontext -a -t textrel_shlib_t
/opt/Adobe/Reader8/Browser/intellinux/nppdf.so

restorecon -v /opt/Adobe/Reader8/Browser/intellinux/nppdf.so

If this is a standard package the path in the RHEL5 bas should be updated.


Note You need to log in before you can comment on or make changes to this bug.