Bug 485886 - SELinux is preventing googleearth-bin from loading /opt/google-earth/librender.so which requires text relocation.
Summary: SELinux is preventing googleearth-bin from loading /opt/google-earth/librende...
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy-targeted
Version: 10
Hardware: i686
OS: Linux
low
medium
Target Milestone: ---
Assignee: Miroslav Grepl
QA Contact: Ben Levenson
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2009-02-17 09:05 UTC by Papa Charlie
Modified: 2009-12-16 11:48 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2009-03-02 11:56:11 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Papa Charlie 2009-02-17 09:05:11 UTC
User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.4) Gecko/2008111723 Firefox/3.0.4 Flock/2.0.2

Google Earth 5.0 (beta) for PC, Mac or Linux gives selinux errors and does not run. After running "chcon -t textrel_shlib_t /opt/google-earth/*.so" , as root, it runs and displays the splash screen. The main application window remains blank.

Reproducible: Always

Steps to Reproduce:
1.This occurs everytime you run Google Earth 5.0 (beta) for PC, Mac or Linux on Fedora core 10
2.
3.

Comment 1 Papa Charlie 2009-02-17 09:17:21 UTC
The setroubleshoot  browser reports as follows:

The googleearth-bin application attempted to load /opt/google-earth/libminizip.so which requires text relocation. This is a potential security problem. Most libraries do not need this permission. Libraries are sometimes coded incorrectly and request this permission. The SELinux Memory Protection Tests web page explains how to remove this requirement.

Comment 2 Digvijay Patankar 2009-02-26 07:15:53 UTC
In my case when I try to run Google Earth beta 5.0 on fedora 10it gives selinux denial as mentioned in comment # 1. 
even after invoking the 'chcon' command the case is same. I do not even get the blank splash screen !

Comment 3 Digvijay Patankar 2009-02-26 07:26:49 UTC
When I tried to run google earth through terminal with root privilege it gave me following reply :
# googleearth
./googleearth-bin: error while loading shared libraries: ./librender.so: cannot restore segment prot after reloc: Permission denied

See if it is useful to you.

Comment 4 Michel Lind 2009-03-01 23:48:51 UTC
This is a selinux-policy-targeted bug, not google-gadgets -- google-gadgets != google-earth.

Comment 5 Miroslav Grepl 2009-03-02 11:56:11 UTC
This is the bug with Google Earth. They have built their libraries incorrectly.

For your information you can get the default SELinux security context:

#  matchpathcon /opt/google-earth/librender.so

/opt/google-earth/librender.so	system_u:object_r:textrel_shlib_t:s0


Execute:

# restorecon -R -v /opt/google-earth/

Should fix it.

Comment 6 Ivo 2009-12-16 11:48:27 UTC
(In reply to comment #5)
> This is the bug with Google Earth. They have built their libraries incorrectly.
> 
> For your information you can get the default SELinux security context:
> 
> #  matchpathcon /opt/google-earth/librender.so
> 
> /opt/google-earth/librender.so system_u:object_r:textrel_shlib_t:s0
> 
> 
> Execute:
> 
> # restorecon -R -v /opt/google-earth/
> 
> Should fix it.  


After this every time i start googleearth, googleearth settings are reseted every time.


Note You need to log in before you can comment on or make changes to this bug.