Bug 430163 - SELinux is preventing /opt/openoffice.org2.3/program/soffice.bin from loading /opt/openoffice.org2.3/program/libvclplug_gen680li.so.1.1
Summary: SELinux is preventing /opt/openoffice.org2.3/program/soffice.bin from loading...
Keywords:
Status: CLOSED CANTFIX
Alias: None
Product: Fedora
Classification: Fedora
Component: openoffice.org
Version: 7
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Caolan McNamara
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2008-01-24 21:55 UTC by Surya Kompalli
Modified: 2008-01-24 23:07 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2008-01-24 23:07:13 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Surya Kompalli 2008-01-24 21:55:22 UTC
Description of problem:
SELinux is preventing /opt/openoffice.org2.3/program/soffice.bin from loading
/opt/openoffice.org2.3/program/libvclplug_gen680li.so.1.1 which requires text
relocation.

Version-Release number of selected component (if applicable):
selinux-policy-2.6.4-8.fc7
openoffice.org2.3.1

How reproducible:
Starting OpenOffice without having jdk and without following command: 
chcon -t textrel_shlib_t /opt/openoffice.org2.3/program/libvclplug_gen680li.so.1.1

Steps to Reproduce:
1.
2.
3.
  
Actual results:
The /opt/openoffice.org2.3/program/soffice.bin application attempted to load
/opt/openoffice.org2.3/program/libvclplug_gen680li.so.1.1 which requires text
relocation. This is a potential security problem. Most libraries do not need
this permission. Libraries are sometimes coded incorrectly and request this
permission. The SELinux Memory Protection Tests web page explains how to remove
this requirement. You can configure SELinux temporarily to allow
/opt/openoffice.org2.3/program/libvclplug_gen680li.so.1.1 to use relocation as a
workaround, until the library is fixed. Please file a bug report against this
package.


The following command will allow this access:chcon -t textrel_shlib_t
/opt/openoffice.org2.3/program/libvclplug_gen680li.so.1.1

Openoffice works fine after this command. 

Expected results:
Openoffice should run normally. 


Additional info:

Comment 1 Caolan McNamara 2008-01-24 23:07:13 UTC
/opt/openoffice.org2.3/ ... is *NOT* where my rpms go. Logging against the
openoffice.org component of our rpms is totally bogus. Either use the fedora
provided openoffice.org rpms, or log the bug directly against selinux-targeted.


Note You need to log in before you can comment on or make changes to this bug.