Fedora Account System
Red Hat Associate
Red Hat Customer
Summary: SELinux is preventing /usr/bin/nspluginscan "execute" access on /home/timali/.mozilla/plugins/libflashplayer.so. Detailed Description: [SELinux is in permissive mode. This access was not denied.] SELinux denied access requested by nspluginscan. It is not expected that this access is required by nspluginscan and this access may signal an intrusion attempt. It is also possible that the specific version or configuration of the application is causing it to require additional access. Allowing Access: You can generate a local policy module to allow this access - see FAQ (http://docs.fedoraproject.org/selinux-faq-fc5/#id2961385) Please file a bug report. Additional Information: Source Context unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c102 3 Target Context unconfined_u:object_r:mozilla_home_t:s0 Target Objects /home/timali/.mozilla/plugins/libflashplayer.so [ file ] Source nspluginscan Source Path /usr/bin/nspluginscan Port <Unknown> Host (removed) Source RPM Packages kdebase-4.5.1-2.fc14 Target RPM Packages Policy RPM selinux-policy-3.9.5-3.fc14 Selinux Enabled True Policy Type targeted Enforcing Mode Permissive Plugin Name catchall Host Name (removed) Platform Linux (removed) 2.6.35.4-28.fc14.x86_64 #1 SMP Wed Sep 15 01:56:54 UTC 2010 x86_64 x86_64 Alert Count 1 First Seen Fri 01 Oct 2010 05:28:07 PM BST Last Seen Fri 01 Oct 2010 05:28:07 PM BST Local ID 8df98bf9-ff56-4bca-903b-8b460e3db892 Line Numbers Raw Audit Messages node=(removed) type=AVC msg=audit(1285950487.955:26626): avc: denied { execute } for pid=2393 comm="nspluginscan" path="/home/timali/.mozilla/plugins/libflashplayer.so" dev=sda2 ino=6959 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:mozilla_home_t:s0 tclass=file node=(removed) type=SYSCALL msg=audit(1285950487.955:26626): arch=c000003e syscall=9 success=yes exit=140222391062528 a0=0 a1=4c06700 a2=5 a3=802 items=0 ppid=2385 pid=2393 auid=502 uid=502 gid=502 euid=502 suid=502 fsuid=502 egid=502 sgid=502 fsgid=502 tty=(none) ses=1 comm="nspluginscan" exe="/usr/bin/nspluginscan" subj=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 key=(null) Hash String generated from catchall,nspluginscan,nsplugin_t,mozilla_home_t,file,execute audit2allow suggests: #============= nsplugin_t ============== allow nsplugin_t mozilla_home_t:file execute;
Fixed in selinux-policy-3.9.5-9.fc14
selinux-policy-3.9.5-10.fc14 has been submitted as an update for Fedora 14. https://admin.fedoraproject.org/updates/selinux-policy-3.9.5-10.fc14
selinux-policy-3.9.5-10.fc14 has been pushed to the Fedora 14 stable repository. If problems still persist, please make note of it in this bug report.