Fedora Account System
Red Hat Associate
Red Hat Customer
Description of problem: Installing openoffice.org-writer2latex-0.5-1.fc9 hangs with SELinux AVCs: Here is the console error message: [Java framework]sunjavaplugin.so could not load Java runtime library: file:///usr/lib/jvm/java-1.7.0-icedtea-1.7.0.0/jre/lib/i386/client/libjvm.so. Got many, many of these..... Here is the AVC: type=AVC msg=audit(1196693534.458:415): avc: denied { execstack } for pid=12928 comm="uno.bin" scontext=system_u:system_r:rpm_script_t:s0 tcontext=system_u:system_r:rpm_script_t:s0 tclass=process type=AVC msg=audit(1196693534.458:415): avc: denied { execmem } for pid=12928 comm="uno.bin" scontext=system_u:system_r:rpm_script_t:s0 tcontext=system_u:system_r:rpm_script_t:s0 tclass=process type=SYSCALL msg=audit(1196693534.458:415): arch=40000003 syscall=125 success=yes exit=0 a0=bfa83000 a1=1000 a2=1000007 a3=fffff000 items=0 ppid=12906 pid=12928 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 comm="uno.bin" exe="/usr/lib/openoffice.org/program/uno.bin" subj=system_u:system_r:rpm_script_t:s0 key=(null) Version-Release number of selected component (if applicable): openoffice.org-writer2latex-0.5-1.fc9 How reproducible: Every time Steps to Reproduce: 1. 2. 3. Actual results: Expected results: Additional info:
Is this a java application?
Fixed in selinux-policy-3.2.1-3.fc9 Never mind, rpm_script_t should be transitioning to unconfined_exemem_t
It's *effectively* a java app in that it may dlopen and exec jvm_* from libjvm.so when faced with java uno components.