Resúmen:

SELinux is preventing /opt/Adobe AIR/Versions/1.0/Adobe AIR Application
Installer from making the program stack executable.

Descripción Detallada:

The 41646F626520414952204170706C69 application attempted to make its stack
executable. This is a potential security problem. This should never ever be
necessary. Stack memory is not executable on most OSes these days and this will
not change. Executable stack memory is one of the biggest security problems. An
execstack error might in fact be most likely raised by malicious code.
Applications are sometimes coded incorrectly and request this permission. The
SELinux Memory Protection Tests
(http://people.redhat.com/drepper/selinux-mem.html) web page explains how to
remove this requirement. If 41646F626520414952204170706C69 does not work and you
need it to work, you can configure SELinux temporarily to allow this access
until the application is fixed. Please file a bug report.

Permitiendo Acceso:

Sometimes a library is accidentally marked with the execstack flag, if you find
a library with this flag you can clear it with the execstack -c LIBRARY_PATH.
Then retry your application. If the app continues to not work, you can turn the
flag back on with execstack -s LIBRARY_PATH. Otherwise, if you trust
41646F626520414952204170706C69 to run correctly, you can change the context of
the executable to execmem_exec_t. "chcon -t execmem_exec_t '/opt/Adobe
AIR/Versions/1.0/Adobe AIR Application Installer'" You must also change the
default file context files on the system in order to preserve them even on a
full relabel. "semanage fcontext -a -t execmem_exec_t '/opt/Adobe
AIR/Versions/1.0/Adobe AIR Application Installer'"

Comando para Corregir:

chcon -t execmem_exec_t '/opt/Adobe AIR/Versions/1.0/Adobe AIR Application
Installer'

Información Adicional:

Contexto Fuente               unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1
                              023
Contexto Destino              unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1
                              023
Objetos Destino               None [ process ]
Fuente                        41646F626520414952204170706C69
Dirección de Fuente          /opt/Adobe AIR/Versions/1.0/Adobe AIR Application
                              Installer
Puerto                        <Desconocido>
Nombre de Equipo              (removed)
Paquetes RPM Fuentes          adobeair-2.0.0-10760
Paquetes RPM Destinos         
RPM de Políticas             selinux-policy-3.6.32-46.fc12
SELinux Activado              True
Tipo de Política             targeted
Modo Obediente                Enforcing
Nombre de Plugin              allow_execstack
Nombre de Equipo              (removed)
Plataforma                    Linux (removed) 2.6.31.5-127.fc12.i686
                              #1 SMP Sat Nov 7 21:41:45 EST 2009 i686 i686
Cantidad de Alertas           3
Visto por Primera Vez         mié 25 nov 2009 13:51:28 COT
Visto por Última Vez         mié 25 nov 2009 14:02:02 COT
ID Local                      9ec9690d-79e3-4278-8089-9974291d3fe2
Números de Línea            

Mensajes de Auditoría Crudos 

node=(removed) type=AVC msg=audit(1259175722.78:71): avc:  denied  { execstack } for  pid=4091 comm=41646F626520414952204170706C69 scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=process

node=(removed) type=SYSCALL msg=audit(1259175722.78:71): arch=40000003 syscall=125 success=no exit=-13 a0=bfe8d000 a1=1000 a2=1000007 a3=bfe8d490 items=0 ppid=1 pid=4091 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm=41646F626520414952204170706C69 exe=2F6F70742F41646F6265204149522F56657273696F6E732F312E302F41646F626520414952204170706C69636174696F6E20496E7374616C6C6572 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)



Hash String generated from  selinux-policy-3.6.32-46.fc12,allow_execstack,41646F626520414952204170706C69,unconfined_t,unconfined_t,process,execstack
audit2allow suggests:

#============= unconfined_t ==============
allow unconfined_t self:process execstack;