Description of problem: Running "oowriter some.doc" gives: $ oowriter ACTA\ Nº\ 3\ RECTORIA.doc /usr/lib64/openoffice.org3/program/soffice: line 79: /usr/lib64/openoffice.org3/program/../basis-link/ure-link/bin/javaldx: Permission denied Version-Release number of selected component (if applicable): openoffice.org-ure-3.0.1-12.1.fc11.x86_64 How reproducible: Always Steps to Reproduce: 1. Start oowriter from e.g. a gnome-terminal 2. 3. Actual results: Above message; seems to work (didn't try to do anything fancy) Expected results: Silence Additional info:
can you run /usr/lib64/openoffice.org/ure/bin/javaldx manually and see if it also fails if it also fails then what is the output of strace -f /usr/lib64/openoffice.org/ure/bin/javaldx > /tmp/strace.log 2>&1 and /usr/sbin/sestatus
Created attachment 326158 [details] The requested strace output
It fails (the output of strace requested is the attachment at #2). ]$ /usr/sbin/sestatus SELinux status: enabled SELinuxfs mount: /selinux Current mode: enforcing Mode from config file: enforcing Policy version: 24 Policy from config file: targeted The above for openoffice.org-ure-3.0.1-12.3.fc11.1.x86_64
I also get: $ ls -lZ /usr/lib64/openoffice.org/ure/bin/javaldx -rwxr-xr-x root root system_u:object_r:java_exec_t:s0 /usr/lib64/openoffice.org/ure/bin/javaldx $ lsattr /usr/lib64/openoffice.org/ure/bin/javaldx --------------- /usr/lib64/openoffice.org/ure/bin/javaldx
*shrug*, looks like strace doesn't have permissions to strace. I suspect that there is some tiresome java permissions issue here. maybe selinux guys can tell us what needs to be done if anything from our side.
Are you seeing any AVC messages? Are you sure this is an SELInux issue? setenforce 0 Does it still happen? id -Z
In /var/log/messages I see variations of: Dec 9 18:33:41 laptop14 nscd: Can't send to audit system: USER_AVC avc: received setenforce notice (enforcing=0)#012: exe="?" (sauid=28, hostname=?, addr=?, terminal=?) Doesn't happen with "setenforce 0" $ id -Z unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
grep avc /var/log/audit/audit.log
Gone away after today's update (openoffice.org-3.0.1-13.2.fc11.x86_64). No change in selinux-policy-*