Bug 577642 - SELinux is preventing /usr/bin/MP4Box from loading /usr/lib/libgpac.so.0.4.6-DEV which requires text relocation.
Summary: SELinux is preventing /usr/bin/MP4Box from loading /usr/lib/libgpac.so.0.4.6-...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy
Version: 12
Hardware: i386
OS: Linux
low
medium
Target Milestone: ---
Assignee: Miroslav Grepl
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard: setroubleshoot_trace_hash:0d8e0fc8e95...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2010-03-28 14:36 UTC by C. M. Trindade
Modified: 2010-04-24 16:31 UTC (History)
3 users (show)

Fixed In Version: selinux-policy-3.6.32-108.fc12
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2010-04-21 06:47:04 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description C. M. Trindade 2010-03-28 14:36:35 UTC
SELinux is preventing /usr/bin/MP4Box from loading /usr/lib/libgpac.so.0.4.6-DEV
which requires text relocation.

MP4Box is from gpac-0.4.6-0.4.cvs20090919.fc12

Hash String generated from  allow_execmod,MP4Box,unconfined_t,lib_t,file,execmod
audit2allow suggests:

Comment 1 Miroslav Grepl 2010-03-29 08:10:22 UTC
Execute:

chcon -t textrel_shlib_t '/usr/lib/libgpac.so.0.4.6-DEV'


Fixed in selinux-policy-3.6.32-108.fc12

Comment 2 Fedora Update System 2010-03-30 19:47:49 UTC
selinux-policy-3.6.32-108.fc12 has been submitted as an update for Fedora 12.
http://admin.fedoraproject.org/updates/selinux-policy-3.6.32-108.fc12

Comment 3 Fedora Update System 2010-04-01 01:53:47 UTC
selinux-policy-3.6.32-108.fc12 has been pushed to the Fedora 12 testing repository.  If problems still persist, please make note of it in this bug report.
 If you want to test the update, you can install it with 
 su -c 'yum --enablerepo=updates-testing update selinux-policy'.  You can provide feedback for this update here: http://admin.fedoraproject.org/updates/selinux-policy-3.6.32-108.fc12

Comment 4 Fedora Update System 2010-04-09 01:23:25 UTC
selinux-policy-3.6.32-108.fc12 has been pushed to the Fedora 12 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 5 C. M. Trindade 2010-04-17 14:45:12 UTC
(In reply to comment #4)
> selinux-policy-3.6.32-108.fc12 has been pushed to the Fedora 12 stable
> repository.  If problems still persist, please make note of it in this bug
> report.    

Still in selinux-policy-3.6.32-108.fc12 using gpac-0.4.6-0.4.cvs20090919.fc12.i686 I get similar error:

MP4Box: error while loading shared libraries: /usr/lib/libgpac.so.0: cannot restore segment prot after reloc: Permission denied.

Using:
chcon -t textrel_shlib_t '/usr/lib/libgpac.so.0.4.6-DEV'

solves the problem for now.

Comment 6 Miroslav Grepl 2010-04-19 06:45:05 UTC
# matchpathcon /usr/lib/libgpac.so.0.4.6-DEV
/usr/lib/libgpac.so.0.4.6-DEV	system_u:object_r:textrel_shlib_t:s0


What is your output?

Comment 7 C. M. Trindade 2010-04-20 16:21:45 UTC
MP4Box: error while loading shared libraries: /usr/lib/libgpac.so.0: cannot
restore segment prot after reloc: Permission denied.

is the only output I get on the command line after issuing the command,
$ MP4Box -new <filename>.mp4 -fps <number> -add <filename>.avi -add <filename>.aac

I didn't have this problem in Ferora 10.

Comment 8 C. M. Trindade 2010-04-20 19:49:11 UTC
Sorry for the delay, this should help.

Summary:
SELinux is preventing /usr/bin/MP4Box "execmod" access to
/usr/lib/libgpac.so.0.4.6-DEV.

Detailed Description:
SELinux denied access requested by MP4Box. /usr/lib/libgpac.so.0.4.6-DEV may be
a mislabeled. /usr/lib/libgpac.so.0.4.6-DEV default SELinux type is
textrel_shlib_t, but its current type is lib_t. Changing this file back to the
default type, may fix your problem.

Additional Information:
Source Context                unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1
                              023
Target Context                system_u:object_r:lib_t:s0
Target Objects                /usr/lib/libgpac.so.0.4.6-DEV [ file ]
Source                        MP4Box
Source Path                   /usr/bin/MP4Box
.............
Source RPM Packages           gpac-0.4.6-0.4.cvs20090919.fc12
Target RPM Packages           gpac-libs-0.4.6-0.4.cvs20090919.fc12
Policy RPM                    selinux-policy-3.6.32-108.fc12
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Plugin Name                   restorecon
.............
Platform                      Linux <hostname>
                              2.6.32.11-99.fc12.i686 #1 SMP Mon Apr 5 16:32:08
                              EDT 2010 i686 i686

Comment 9 Miroslav Grepl 2010-04-21 06:47:04 UTC
execute:

# restorecon -Rv /usr/lib/libgpac.so.0.4.6-DEV


Note You need to log in before you can comment on or make changes to this bug.