Red Hat Bugzilla – Bug 475026
oowriter "permission denied" message
Last modified: 2008-12-12 13:49:34 EST
Description of problem:
Running "oowriter some.doc" gives:
$ oowriter ACTA\ Nº\ 3\ RECTORIA.doc
/usr/lib64/openoffice.org3/program/soffice: line 79: /usr/lib64/openoffice.org3/program/../basis-link/ure-link/bin/javaldx: Permission denied
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. Start oowriter from e.g. a gnome-terminal
Above message; seems to work (didn't try to do anything fancy)
can you run
manually and see if it also fails
if it also fails then what is the output of
/usr/lib64/openoffice.org/ure/bin/javaldx > /tmp/strace.log 2>&1
Created attachment 326158 [details]
The requested strace output
It fails (the output of strace requested is the attachment at #2).
SELinux status: enabled
SELinuxfs mount: /selinux
Current mode: enforcing
Mode from config file: enforcing
Policy version: 24
Policy from config file: targeted
The above for openoffice.org-ure-3.0.1-12.3.fc11.1.x86_64
I also get:
$ ls -lZ /usr/lib64/openoffice.org/ure/bin/javaldx
-rwxr-xr-x root root system_u:object_r:java_exec_t:s0 /usr/lib64/openoffice.org/ure/bin/javaldx
$ lsattr /usr/lib64/openoffice.org/ure/bin/javaldx
*shrug*, looks like strace doesn't have permissions to strace. I suspect that there is some tiresome java permissions issue here.
maybe selinux guys can tell us what needs to be done if anything from our side.
Are you seeing any AVC messages? Are you sure this is an SELInux issue?
Does it still happen?
In /var/log/messages I see variations of:
Dec 9 18:33:41 laptop14 nscd: Can't send to audit system: USER_AVC avc: received setenforce notice (enforcing=0)#012: exe="?" (sauid=28, hostname=?, addr=?, terminal=?)
Doesn't happen with "setenforce 0"
$ id -Z
grep avc /var/log/audit/audit.log
Gone away after today's update (openoffice.org-3.0.1-13.2.fc11.x86_64). No change in selinux-policy-*