Bug 475026 - oowriter "permission denied" message
oowriter "permission denied" message
Product: Fedora
Classification: Fedora
Component: selinux-policy-targeted (Show other bugs)
x86_64 Linux
low Severity medium
: ---
: ---
Assigned To: Daniel Walsh
Ben Levenson
Depends On:
  Show dependency treegraph
Reported: 2008-12-06 15:03 EST by Horst H. von Brand
Modified: 2008-12-12 13:49 EST (History)
2 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 2008-12-12 13:49:34 EST
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)
The requested strace output (442 bytes, application/octet-stream)
2008-12-08 13:25 EST, Horst H. von Brand
no flags Details

  None (edit)
Description Horst H. von Brand 2008-12-06 15:03:19 EST
Description of problem:
Running "oowriter some.doc" gives:

  $ oowriter ACTA\ Nº\ 3\ RECTORIA.doc 
  /usr/lib64/openoffice.org3/program/soffice: line 79: /usr/lib64/openoffice.org3/program/../basis-link/ure-link/bin/javaldx: Permission denied

Version-Release number of selected component (if applicable):

How reproducible:

Steps to Reproduce:
1. Start oowriter from e.g. a gnome-terminal
Actual results:
Above message; seems to work (didn't try to do anything fancy)

Expected results:

Additional info:
Comment 1 Caolan McNamara 2008-12-08 07:02:48 EST
can you run 


manually and see if it also fails

if it also fails then what is the output of

strace -f 
/usr/lib64/openoffice.org/ure/bin/javaldx > /tmp/strace.log 2>&1


Comment 2 Horst H. von Brand 2008-12-08 13:25:50 EST
Created attachment 326158 [details]
The requested strace output
Comment 3 Horst H. von Brand 2008-12-08 13:27:53 EST
It fails (the output of strace requested is the attachment at #2).

]$ /usr/sbin/sestatus
SELinux status:                 enabled
SELinuxfs mount:                /selinux
Current mode:                   enforcing
Mode from config file:          enforcing
Policy version:                 24
Policy from config file:        targeted

The above for openoffice.org-ure-3.0.1-12.3.fc11.1.x86_64
Comment 4 Horst H. von Brand 2008-12-08 13:31:49 EST
I also get:

$ ls -lZ /usr/lib64/openoffice.org/ure/bin/javaldx
-rwxr-xr-x  root root system_u:object_r:java_exec_t:s0 /usr/lib64/openoffice.org/ure/bin/javaldx
$ lsattr /usr/lib64/openoffice.org/ure/bin/javaldx
--------------- /usr/lib64/openoffice.org/ure/bin/javaldx
Comment 5 Caolan McNamara 2008-12-08 18:01:04 EST
*shrug*, looks like strace doesn't have permissions to strace. I suspect that there is some tiresome java permissions issue here.

maybe selinux guys can tell us what needs to be done if anything from our side.
Comment 6 Daniel Walsh 2008-12-09 08:58:09 EST
Are you seeing any AVC messages?  Are you sure this is an SELInux issue?  

setenforce 0

Does it still happen?

id -Z
Comment 7 Horst H. von Brand 2008-12-09 16:40:07 EST
In /var/log/messages I see  variations of:

   Dec  9 18:33:41 laptop14 nscd: Can't send to audit system: USER_AVC avc:  received setenforce notice (enforcing=0)#012: exe="?" (sauid=28, hostname=?, addr=?, terminal=?)

Doesn't happen with "setenforce 0"

   $ id -Z
Comment 8 Daniel Walsh 2008-12-10 10:00:03 EST
grep avc /var/log/audit/audit.log
Comment 9 Horst H. von Brand 2008-12-12 12:08:56 EST
Gone away after today's update (openoffice.org-3.0.1-13.2.fc11.x86_64). No change in selinux-policy-*

Note You need to log in before you can comment on or make changes to this bug.