Bug 533715 - SELinux is preventing /usr/bin/amarok from making the program stack executable.
Summary: SELinux is preventing /usr/bin/amarok from making the program stack executable.
Keywords:
Status: CLOSED DUPLICATE of bug 533987
Alias: None
Product: Fedora
Classification: Fedora
Component: amarok
Version: 12
Hardware: x86_64
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Rex Dieter
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard: setroubleshoot_trace_hash:85c3675e189...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2009-11-08 18:29 UTC by A S Alam
Modified: 2013-07-03 00:56 UTC (History)
8 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2009-11-10 13:50:23 UTC
Type: ---
Embargoed:

Attachments (Terms of Use)

Description A S Alam 2009-11-08 18:29:48 UTC 
Hash String generated from  selinux-policy-3.6.32-41.fc12,allow_execstack,amarok,unconfined_t,unconfined_t,process,execstack
audit2allow suggests:
Comment 1 Daniel Walsh 2009-11-09 20:32:10 UTC 
There is no reason that amarok should need this priv.

A S Alam, could you attach the full output from the sealert.

amarok should not need execstack.

You are not running with nvidia drivers are you?
Comment 2 Rex Dieter 2009-11-09 20:56:01 UTC 
And what kinds of audio files are you trying to play here?  
What phonon backend? 
what extra codecs do you have installed, if any?
Comment 3 A S Alam 2009-11-10 01:16:59 UTC 
it was WMA file with extra codecs (from rpmfusion) (xine-lib-extras-freeworld)
Comment 4 Rex Dieter 2009-11-10 12:50:33 UTC 
ok I'll see if I can reproduce, do the denials occur with any/all wma files?
Comment 5 Daniel Walsh 2009-11-10 13:02:31 UTC 
Can you see if the execstack flag is set by executing execstack -q on the shared libraries.  If one is set, try to clear it with execstack -c and see if the audio still works.  And  see if the AVC dissapears.
Comment 6 Rex Dieter 2009-11-10 13:31:06 UTC 
I can't reproduce.
Comment 7 Daniel Walsh 2009-11-10 13:50:23 UTC 

*** This bug has been marked as a duplicate of bug 533987 ***
Note You need to log in before you can comment on or make changes to this bug.