Red Hat Bugzilla – Bug 458613
SELinux is preventing the gtk-gnash from using potentially mislabeled files
Last modified: 2008-09-09 14:20:59 EDT
Created attachment 313899 [details]
part off yum.log and SELinux AVC
Description of problem:
AVC denials on flash page after innstalling swfdec files and gnash
Version-Release number of selected component (if applicable):
Steps to Reproduce:
Install swfdec files and gnash ( see att from yum log )
In firefox open http://www.hi.is/
page opens , but AVC denials
I have tried
restorecon -R -v './.pulse'
as root ( su - )
but that does not help
Please include the full output of the AVC message from setroubleshoot
I think it is there.
There is now new line marker in the copy.
Copy in to gedit.
The nsplugin process is trying to setattr on the .pulse directory.
This will not be allowed and should probably be dontaudited. I don't see why a plugin would need to change the attributes of a directory.
Could you relabel your homedir to get the correct labeling on the directory.
restorecon -R -v ~/
Should fix it.
.pulse is supposed to be labeled .gnome_home Which should eliminate the AVC.
Using restorecond should fix the labels when directories are created so nsplugin will work correctly.
It works now. Flash too.
[floki@localhost ~]$ rpm -q gnash