Summary: SELinux is preventing /usr/bin/nautilus "execstack" access. Detailed Description: SELinux denied access requested by nautilus. It is not expected that this access is required by nautilus and this access may signal an intrusion attempt. It is also possible that the specific version or configuration of the application is causing it to require additional access. Allowing Access: You can generate a local policy module to allow this access - see FAQ (http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Please file a bug report. Additional Information: Source Context xguest_u:xguest_r:xguest_t:s0 Target Context xguest_u:xguest_r:xguest_t:s0 Target Objects None [ process ] Source nautilus Source Path /usr/bin/nautilus Port <Unknown> Host (removed) Source RPM Packages nautilus-2.28.1-4.fc12 Target RPM Packages Policy RPM selinux-policy-3.6.32-46.fc12 Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Plugin Name catchall Host Name (removed) Platform Linux (removed) 2.6.31.5-127.fc12.i686 #1 SMP Sat Nov 7 21:41:45 EST 2009 i686 i686 Alert Count 2 First Seen Wed 02 Dec 2009 12:36:39 AM IST Last Seen Wed 02 Dec 2009 12:36:39 AM IST Local ID 9a8d1cf3-1eb1-4dec-92a7-87bef8e1d424 Line Numbers Raw Audit Messages node=(removed) type=AVC msg=audit(1259694399.835:71): avc: denied { execstack } for pid=3801 comm="nautilus" scontext=xguest_u:xguest_r:xguest_t:s0 tcontext=xguest_u:xguest_r:xguest_t:s0 tclass=process node=(removed) type=SYSCALL msg=audit(1259694399.835:71): arch=40000003 syscall=125 success=no exit=-13 a0=bfa2f000 a1=1000 a2=1000007 a3=bfa2de84 items=0 ppid=3518 pid=3801 auid=502 uid=502 gid=502 euid=502 suid=502 fsuid=502 egid=502 sgid=502 fsgid=502 tty=(none) ses=4 comm="nautilus" exe="/usr/bin/nautilus" subj=xguest_u:xguest_r:xguest_t:s0 key=(null) Hash String generated from selinux-policy-3.6.32-46.fc12,catchall,nautilus,xguest_t,xguest_t,process,execstack audit2allow suggests: #============= xguest_t ============== allow xguest_t self:process execstack;
Do you actually see anything blowing up or just reporting this AVC.
I encountered this while viewing file properties.. When I asked for file properties the system didnt answer instead this message was shown.
Yes it is probably caused by a bad library on your system. Probably from a closed source driver. You can look for these drivers by using the execstack command. https://bugzilla.redhat.com/show_bug.cgi?id=533987 Has an explanation of how to use the command. I am going to add code to make xguest_t follow the allow_execstack boolean. Fixed in selinux-policy-3.6.32-55.fc12.noarch
selinux-policy-3.6.32-55.fc12 has been submitted as an update for Fedora 12. http://admin.fedoraproject.org/updates/selinux-policy-3.6.32-55.fc12
selinux-policy-3.6.32-55.fc12 has been pushed to the Fedora 12 testing repository. If problems still persist, please make note of it in this bug report. If you want to test the update, you can install it with su -c 'yum --enablerepo=updates-testing update selinux-policy'. You can provide feedback for this update here: http://admin.fedoraproject.org/updates/F12/FEDORA-2009-12650
selinux-policy-3.6.32-55.fc12 has been pushed to the Fedora 12 stable repository. If problems still persist, please make note of it in this bug report.