On current Rawhide, I can't get Flash to work, whether with the Adobe plugin (current 32-bit release, wrapped via nspluginwrapper) *or* Gnash. The symptoms are identical: any page with Flash on causes Firefox to freeze for a good while, nearly a minute, then finally render the page, but the Flash elements do not work. The exact same version of the Flash plugin, wrapped via nspluginwrapper, *does* work on current Fedora 15 - including Firefox 5.0 - so this is somehow Rawhide specific, I think.
This seems to be an SELinux problem, but an odd one: I don't get any SELinux alert listed in sealert, nor an avc in /var/log/messages, that I can see. But SELinux is clearly the issue, because I can reproduce or 'fix' the issue at will simply by switching between Enforcing and Permissive.
I do see a few avcs, but none seems specifically related to the bug - they don't happen at the time the bug is happening. Still, for completeness, here they are (with gnash plugin in use atm): Jun 29 11:56:57 adam setroubleshoot: SELinux is preventing /usr/bin/gtk-gnash from unlink access on the file registry.x86_64.bin. For complete SELinux messages. run sealert -l 501dfb2b-14ec-49e9-92e6-9995fb765b09 Jun 29 11:57:08 adam setroubleshoot: SELinux is preventing /usr/bin/gtk-gnash from create access on the file orcexec.W27hlz. For complete SELinux messages. run sealert -l 1e05f360-342f-401f-a87c-00d7a6431d6f Jun 29 11:57:08 adam setroubleshoot: SELinux is preventing /usr/bin/gtk-gnash from create access on the file orcexec.W27hlz. For complete SELinux messages. run sealert -l 1e05f360-342f-401f-a87c-00d7a6431d6f Jun 29 11:57:08 adam setroubleshoot: SELinux is preventing /usr/bin/gtk-gnash from unlink access on the file orcexec.W27hlz. For complete SELinux messages. run sealert -l 473bfc99-6ddb-4008-ae73-0d431d63027a Jun 29 11:57:08 adam setroubleshoot: SELinux is preventing /usr/bin/gtk-gnash from execute access on the file /home/adamw/orcexec.W27hlz (deleted). For complete SELinux messages. run sealert -l 1e5e2ac3-bedc-4fc5-911e-9bf73bf90f7b I think these are from while the plugin is actually working successfully, in Permissive mode.
Just confirming this is indeed the same for gnash and proprietary plugin - Permissive makes the Adobe plugin work too.
ausearch -m avc | grep gtk-gnash
type=SYSCALL msg=audit(1309373643.362:2905): arch=c000003e syscall=2 success=yes exit=6 a0=22f53e0 a1=142 a2=180 a3=3e7fc814e0 items=0 ppid=4301 pid=4303 auid=501 uid=501 gid=501 euid=501 suid=501 fsuid=501 egid=501 sgid=501 fsgid=501 tty=(none) ses=18 comm="gtk-gnash" exe="/usr/bin/gtk-gnash" subj=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1309373643.362:2905): avc: denied { write } for pid=4303 comm="gtk-gnash" name=".pulse-cookie" dev=dm-2 ino=131119 scontext=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file type=SYSCALL msg=audit(1309373816.952:2914): arch=c000003e syscall=82 success=yes exit=0 a0=31125b0 a1=2b844c0 a2=0 a3=7fffe151a980 items=0 ppid=4546 pid=4556 auid=501 uid=501 gid=501 euid=501 suid=501 fsuid=501 egid=501 sgid=501 fsgid=501 tty=(none) ses=18 comm="gtk-gnash" exe="/usr/bin/gtk-gnash" subj=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1309373816.952:2914): avc: denied { unlink } for pid=4556 comm="gtk-gnash" name="registry.x86_64.bin" dev=dm-2 ino=262146 scontext=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file type=SYSCALL msg=audit(1309373828.007:2917): arch=c000003e syscall=2 success=yes exit=16 a0=334f450 a1=c2 a2=180 a3=73 items=0 ppid=4546 pid=4556 auid=501 uid=501 gid=501 euid=501 suid=501 fsuid=501 egid=501 sgid=501 fsgid=501 tty=(none) ses=18 comm="gtk-gnash" exe="/usr/bin/gtk-gnash" subj=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1309373828.007:2917): avc: denied { read write open } for pid=4556 comm="gtk-gnash" name="orcexec.W27hlz" dev=dm-2 ino=133612 scontext=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=AVC msg=audit(1309373828.007:2917): avc: denied { create } for pid=4556 comm="gtk-gnash" name="orcexec.W27hlz" scontext=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=SYSCALL msg=audit(1309373828.008:2918): arch=c000003e syscall=87 success=yes exit=0 a0=334f450 a1=0 a2=0 a3=73 items=0 ppid=4546 pid=4556 auid=501 uid=501 gid=501 euid=501 suid=501 fsuid=501 egid=501 sgid=501 fsgid=501 tty=(none) ses=18 comm="gtk-gnash" exe="/usr/bin/gtk-gnash" subj=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1309373828.008:2918): avc: denied { unlink } for pid=4556 comm="gtk-gnash" name="orcexec.W27hlz" dev=dm-2 ino=133612 scontext=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=SYSCALL msg=audit(1309373828.008:2919): arch=c000003e syscall=9 success=yes exit=140380819492864 a0=0 a1=10000 a2=5 a3=1 items=0 ppid=4546 pid=4556 auid=501 uid=501 gid=501 euid=501 suid=501 fsuid=501 egid=501 sgid=501 fsgid=501 tty=(none) ses=18 comm="gtk-gnash" exe="/usr/bin/gtk-gnash" subj=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1309373828.008:2919): avc: denied { execute } for pid=4556 comm="gtk-gnash" path=2F686F6D652F6164616D772F6F7263657865632E573237686C7A202864656C6574656429 dev=dm-2 ino=133612 scontext=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file Again, since I switched to Permissive and made the plugin work that way, some of those will be from while it was running, I guess.
Could you make sure your homedir is labeled correctly, restorecon -R -v ~/
this is bug in liborc (name="orcexec.W27hlz") it should be dumping this to /tmp instead.
dwalsh: that found a huge pile of stuff to relabel, but after the relabel, it's still broken. I'm on the proprietary plugin now, so I do ausearch -m avc | grep flash, and see: [root@adam lib]# ausearch -m avc | grep flash type=AVC msg=audit(1309374122.516:2929): avc: denied { getattr } for pid=5338 comm="npviewer.bin" path="/home/adamw/.macromedia/Flash_Player/macromedia.com/support/flashplayer/sys/settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=AVC msg=audit(1309374138.704:2932): avc: denied { getattr } for pid=5338 comm="npviewer.bin" path="/home/adamw/.macromedia/Flash_Player/macromedia.com/support/flashplayer/sys/settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=AVC msg=audit(1309385003.749:2946): avc: denied { getattr } for pid=5338 comm="npviewer.bin" path="/home/adamw/.macromedia/Flash_Player/macromedia.com/support/flashplayer/sys/settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=AVC msg=audit(1309389840.081:2999): avc: denied { getattr } for pid=5338 comm="npviewer.bin" path="/home/adamw/.macromedia/Flash_Player/macromedia.com/support/flashplayer/sys/settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=AVC msg=audit(1309391248.494:3009): avc: denied { getattr } for pid=5338 comm="npviewer.bin" path="/home/adamw/.macromedia/Flash_Player/macromedia.com/support/flashplayer/sys/settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=AVC msg=audit(1309392910.480:3024): avc: denied { getattr } for pid=5338 comm="npviewer.bin" path="/home/adamw/.macromedia/Flash_Player/macromedia.com/support/flashplayer/sys/settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=AVC msg=audit(1309394212.506:86): avc: denied { getattr } for pid=2227 comm="npviewer.bin" path="/home/adamw/.macromedia/Flash_Player/macromedia.com/support/flashplayer/sys/settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=AVC msg=audit(1309394214.453:88): avc: denied { getattr } for pid=2227 comm="npviewer.bin" path="/home/adamw/.macromedia/Flash_Player/macromedia.com/support/flashplayer/sys/settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=AVC msg=audit(1309402494.315:96): avc: denied { getattr } for pid=2227 comm="npviewer.bin" path="/home/adamw/.macromedia/Flash_Player/macromedia.com/support/flashplayer/sys/settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=AVC msg=audit(1309402495.304:98): avc: denied { getattr } for pid=2227 comm="npviewer.bin" path="/home/adamw/.macromedia/Flash_Player/macromedia.com/support/flashplayer/sys/#cdn.static.viddler.com/settings.sol" dev=dm-2 ino=525363 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=AVC msg=audit(1309405730.738:110): avc: denied { getattr } for pid=2227 comm="npviewer.bin" path="/home/adamw/.macromedia/Flash_Player/macromedia.com/support/flashplayer/sys/settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=AVC msg=audit(1309407110.269:119): avc: denied { getattr } for pid=2227 comm="npviewer.bin" path="/home/adamw/.macromedia/Flash_Player/macromedia.com/support/flashplayer/sys/settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file
grepping for npviewer gives: [root@adam adamw]# ausearch -m avc | grep npviewer type=SYSCALL msg=audit(1309374122.516:2929): arch=40000003 syscall=195 per=8 success=yes exit=0 a0=8b99930 a1=ffdb0570 a2=4c665ff4 a3=ffdb07a4 items=0 ppid=5317 pid=5338 auid=501 uid=501 gid=501 euid=501 suid=501 fsuid=501 egid=501 sgid=501 fsgid=501 tty=(none) ses=18 comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1309374122.516:2929): avc: denied { getattr } for pid=5338 comm="npviewer.bin" path="/home/adamw/.macromedia/Flash_Player/macromedia.com/support/flashplayer/sys/settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=SYSCALL msg=audit(1309374122.516:2930): arch=40000003 syscall=5 per=8 success=yes exit=11 a0=8b9ce98 a1=8000 a2=1b6 a3=0 items=0 ppid=5317 pid=5338 auid=501 uid=501 gid=501 euid=501 suid=501 fsuid=501 egid=501 sgid=501 fsgid=501 tty=(none) ses=18 comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1309374122.516:2930): avc: denied { open } for pid=5338 comm="npviewer.bin" name="settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=AVC msg=audit(1309374122.516:2930): avc: denied { read } for pid=5338 comm="npviewer.bin" name="settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=SYSCALL msg=audit(1309374125.454:2931): arch=40000003 syscall=10 per=8 success=yes exit=0 a0=8ba22c0 a1=6c6f73 a2=133f98c a3=ffdb02ec items=0 ppid=5317 pid=5338 auid=501 uid=501 gid=501 euid=501 suid=501 fsuid=501 egid=501 sgid=501 fsgid=501 tty=(none) ses=18 comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1309374125.454:2931): avc: denied { unlink } for pid=5338 comm="npviewer.bin" name="videostats.sol" dev=dm-2 ino=659832 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=SYSCALL msg=audit(1309374138.704:2932): arch=40000003 syscall=195 per=8 success=yes exit=0 a0=8c490b0 a1=ffdb0570 a2=4c665ff4 a3=ffdb07a4 items=0 ppid=5317 pid=5338 auid=501 uid=501 gid=501 euid=501 suid=501 fsuid=501 egid=501 sgid=501 fsgid=501 tty=(none) ses=18 comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1309374138.704:2932): avc: denied { getattr } for pid=5338 comm="npviewer.bin" path="/home/adamw/.macromedia/Flash_Player/macromedia.com/support/flashplayer/sys/settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=SYSCALL msg=audit(1309374138.704:2933): arch=40000003 syscall=5 per=8 success=yes exit=11 a0=8ba9e48 a1=8000 a2=1b6 a3=0 items=0 ppid=5317 pid=5338 auid=501 uid=501 gid=501 euid=501 suid=501 fsuid=501 egid=501 sgid=501 fsgid=501 tty=(none) ses=18 comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1309374138.704:2933): avc: denied { open } for pid=5338 comm="npviewer.bin" name="settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=AVC msg=audit(1309374138.704:2933): avc: denied { read } for pid=5338 comm="npviewer.bin" name="settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=SYSCALL msg=audit(1309385003.749:2946): arch=40000003 syscall=195 per=8 success=yes exit=0 a0=8bae490 a1=ffdaea40 a2=4c665ff4 a3=ffdaec74 items=0 ppid=5317 pid=5338 auid=501 uid=501 gid=501 euid=501 suid=501 fsuid=501 egid=501 sgid=501 fsgid=501 tty=(none) ses=18 comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1309385003.749:2946): avc: denied { getattr } for pid=5338 comm="npviewer.bin" path="/home/adamw/.macromedia/Flash_Player/macromedia.com/support/flashplayer/sys/settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=SYSCALL msg=audit(1309385003.749:2947): arch=40000003 syscall=5 per=8 success=yes exit=11 a0=8c73910 a1=8000 a2=1b6 a3=0 items=0 ppid=5317 pid=5338 auid=501 uid=501 gid=501 euid=501 suid=501 fsuid=501 egid=501 sgid=501 fsgid=501 tty=(none) ses=18 comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1309385003.749:2947): avc: denied { open } for pid=5338 comm="npviewer.bin" name="settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=AVC msg=audit(1309385003.749:2947): avc: denied { read } for pid=5338 comm="npviewer.bin" name="settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=SYSCALL msg=audit(1309389840.081:2999): arch=40000003 syscall=195 per=8 success=yes exit=0 a0=8baa730 a1=ffdb0570 a2=4c665ff4 a3=ffdb07a4 items=0 ppid=5317 pid=5338 auid=501 uid=501 gid=501 euid=501 suid=501 fsuid=501 egid=501 sgid=501 fsgid=501 tty=(none) ses=18 comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1309389840.081:2999): avc: denied { getattr } for pid=5338 comm="npviewer.bin" path="/home/adamw/.macromedia/Flash_Player/macromedia.com/support/flashplayer/sys/settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=SYSCALL msg=audit(1309389840.082:3000): arch=40000003 syscall=5 per=8 success=yes exit=11 a0=9444e00 a1=8000 a2=1b6 a3=0 items=0 ppid=5317 pid=5338 auid=501 uid=501 gid=501 euid=501 suid=501 fsuid=501 egid=501 sgid=501 fsgid=501 tty=(none) ses=18 comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1309389840.082:3000): avc: denied { open } for pid=5338 comm="npviewer.bin" name="settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=AVC msg=audit(1309389840.082:3000): avc: denied { read } for pid=5338 comm="npviewer.bin" name="settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=SYSCALL msg=audit(1309391248.494:3009): arch=40000003 syscall=195 per=8 success=yes exit=0 a0=8c333e8 a1=ffdb0570 a2=4c665ff4 a3=ffdb07a4 items=0 ppid=5317 pid=5338 auid=501 uid=501 gid=501 euid=501 suid=501 fsuid=501 egid=501 sgid=501 fsgid=501 tty=(none) ses=18 comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1309391248.494:3009): avc: denied { getattr } for pid=5338 comm="npviewer.bin" path="/home/adamw/.macromedia/Flash_Player/macromedia.com/support/flashplayer/sys/settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=SYSCALL msg=audit(1309391248.495:3010): arch=40000003 syscall=5 per=8 success=yes exit=11 a0=8c332b8 a1=8000 a2=1b6 a3=0 items=0 ppid=5317 pid=5338 auid=501 uid=501 gid=501 euid=501 suid=501 fsuid=501 egid=501 sgid=501 fsgid=501 tty=(none) ses=18 comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1309391248.495:3010): avc: denied { open } for pid=5338 comm="npviewer.bin" name="settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=AVC msg=audit(1309391248.495:3010): avc: denied { read } for pid=5338 comm="npviewer.bin" name="settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=SYSCALL msg=audit(1309392910.480:3024): arch=40000003 syscall=195 per=8 success=yes exit=0 a0=8bc8368 a1=ffdaea40 a2=4c665ff4 a3=ffdaec74 items=0 ppid=5317 pid=5338 auid=501 uid=501 gid=501 euid=501 suid=501 fsuid=501 egid=501 sgid=501 fsgid=501 tty=(none) ses=18 comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1309392910.480:3024): avc: denied { getattr } for pid=5338 comm="npviewer.bin" path="/home/adamw/.macromedia/Flash_Player/macromedia.com/support/flashplayer/sys/settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=SYSCALL msg=audit(1309392910.480:3025): arch=40000003 syscall=5 per=8 success=yes exit=11 a0=94055d8 a1=8000 a2=1b6 a3=0 items=0 ppid=5317 pid=5338 auid=501 uid=501 gid=501 euid=501 suid=501 fsuid=501 egid=501 sgid=501 fsgid=501 tty=(none) ses=18 comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1309392910.480:3025): avc: denied { open } for pid=5338 comm="npviewer.bin" name="settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=AVC msg=audit(1309392910.480:3025): avc: denied { read } for pid=5338 comm="npviewer.bin" name="settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=SYSCALL msg=audit(1309394212.507:87): arch=40000003 syscall=5 per=8 success=yes exit=11 a0=8240308 a1=8000 a2=1b6 a3=0 items=0 ppid=2206 pid=2227 auid=501 uid=501 gid=501 euid=501 suid=501 fsuid=501 egid=501 sgid=501 fsgid=501 tty=(none) ses=1 comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1309394212.507:87): avc: denied { open } for pid=2227 comm="npviewer.bin" name="settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=AVC msg=audit(1309394212.507:87): avc: denied { read } for pid=2227 comm="npviewer.bin" name="settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=SYSCALL msg=audit(1309394212.506:86): arch=40000003 syscall=195 per=8 success=yes exit=0 a0=8240778 a1=ffc91e20 a2=4c665ff4 a3=ffc92054 items=0 ppid=2206 pid=2227 auid=501 uid=501 gid=501 euid=501 suid=501 fsuid=501 egid=501 sgid=501 fsgid=501 tty=(none) ses=1 comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1309394212.506:86): avc: denied { getattr } for pid=2227 comm="npviewer.bin" path="/home/adamw/.macromedia/Flash_Player/macromedia.com/support/flashplayer/sys/settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=SYSCALL msg=audit(1309394214.453:88): arch=40000003 syscall=195 per=8 success=yes exit=0 a0=827b1c0 a1=ffc91e20 a2=4c665ff4 a3=ffc92054 items=0 ppid=2206 pid=2227 auid=501 uid=501 gid=501 euid=501 suid=501 fsuid=501 egid=501 sgid=501 fsgid=501 tty=(none) ses=1 comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1309394214.453:88): avc: denied { getattr } for pid=2227 comm="npviewer.bin" path="/home/adamw/.macromedia/Flash_Player/macromedia.com/support/flashplayer/sys/settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=SYSCALL msg=audit(1309394214.453:89): arch=40000003 syscall=5 per=8 success=yes exit=11 a0=827ad50 a1=8000 a2=1b6 a3=0 items=0 ppid=2206 pid=2227 auid=501 uid=501 gid=501 euid=501 suid=501 fsuid=501 egid=501 sgid=501 fsgid=501 tty=(none) ses=1 comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1309394214.453:89): avc: denied { open } for pid=2227 comm="npviewer.bin" name="settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=AVC msg=audit(1309394214.453:89): avc: denied { read } for pid=2227 comm="npviewer.bin" name="settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=SYSCALL msg=audit(1309402494.315:96): arch=40000003 syscall=195 per=8 success=yes exit=0 a0=8207cd0 a1=ffc91e20 a2=4c665ff4 a3=ffc92054 items=0 ppid=2206 pid=2227 auid=501 uid=501 gid=501 euid=501 suid=501 fsuid=501 egid=501 sgid=501 fsgid=501 tty=(none) ses=1 comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1309402494.315:96): avc: denied { getattr } for pid=2227 comm="npviewer.bin" path="/home/adamw/.macromedia/Flash_Player/macromedia.com/support/flashplayer/sys/settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=SYSCALL msg=audit(1309402494.316:97): arch=40000003 syscall=5 per=8 success=yes exit=11 a0=8271be0 a1=8000 a2=1b6 a3=0 items=0 ppid=2206 pid=2227 auid=501 uid=501 gid=501 euid=501 suid=501 fsuid=501 egid=501 sgid=501 fsgid=501 tty=(none) ses=1 comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1309402494.316:97): avc: denied { open } for pid=2227 comm="npviewer.bin" name="settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=AVC msg=audit(1309402494.316:97): avc: denied { read } for pid=2227 comm="npviewer.bin" name="settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=SYSCALL msg=audit(1309402495.304:98): arch=40000003 syscall=195 per=8 success=yes exit=0 a0=82ef798 a1=ffc911c0 a2=4c665ff4 a3=ffc913f4 items=0 ppid=2206 pid=2227 auid=501 uid=501 gid=501 euid=501 suid=501 fsuid=501 egid=501 sgid=501 fsgid=501 tty=(none) ses=1 comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1309402495.304:98): avc: denied { getattr } for pid=2227 comm="npviewer.bin" path="/home/adamw/.macromedia/Flash_Player/macromedia.com/support/flashplayer/sys/#cdn.static.viddler.com/settings.sol" dev=dm-2 ino=525363 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=SYSCALL msg=audit(1309402495.305:99): arch=40000003 syscall=5 per=8 success=yes exit=11 a0=82c1f80 a1=8000 a2=1b6 a3=0 items=0 ppid=2206 pid=2227 auid=501 uid=501 gid=501 euid=501 suid=501 fsuid=501 egid=501 sgid=501 fsgid=501 tty=(none) ses=1 comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1309402495.305:99): avc: denied { open } for pid=2227 comm="npviewer.bin" name="settings.sol" dev=dm-2 ino=525363 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=AVC msg=audit(1309402495.305:99): avc: denied { read } for pid=2227 comm="npviewer.bin" name="settings.sol" dev=dm-2 ino=525363 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=SYSCALL msg=audit(1309405730.738:110): arch=40000003 syscall=195 per=8 success=yes exit=0 a0=826b6a8 a1=ffc91e20 a2=4c665ff4 a3=ffc92054 items=0 ppid=2206 pid=2227 auid=501 uid=501 gid=501 euid=501 suid=501 fsuid=501 egid=501 sgid=501 fsgid=501 tty=(none) ses=1 comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1309405730.738:110): avc: denied { getattr } for pid=2227 comm="npviewer.bin" path="/home/adamw/.macromedia/Flash_Player/macromedia.com/support/flashplayer/sys/settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=SYSCALL msg=audit(1309405730.738:111): arch=40000003 syscall=5 per=8 success=yes exit=11 a0=8263248 a1=8000 a2=1b6 a3=0 items=0 ppid=2206 pid=2227 auid=501 uid=501 gid=501 euid=501 suid=501 fsuid=501 egid=501 sgid=501 fsgid=501 tty=(none) ses=1 comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1309405730.738:111): avc: denied { open } for pid=2227 comm="npviewer.bin" name="settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=AVC msg=audit(1309405730.738:111): avc: denied { read } for pid=2227 comm="npviewer.bin" name="settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=SYSCALL msg=audit(1309407110.269:119): arch=40000003 syscall=195 per=8 success=yes exit=0 a0=825ba30 a1=ffc91e20 a2=4c665ff4 a3=ffc92054 items=0 ppid=2206 pid=2227 auid=501 uid=501 gid=501 euid=501 suid=501 fsuid=501 egid=501 sgid=501 fsgid=501 tty=(none) ses=1 comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1309407110.269:119): avc: denied { getattr } for pid=2227 comm="npviewer.bin" path="/home/adamw/.macromedia/Flash_Player/macromedia.com/support/flashplayer/sys/settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=SYSCALL msg=audit(1309407110.269:120): arch=40000003 syscall=5 per=8 success=yes exit=11 a0=82ff980 a1=8000 a2=1b6 a3=0 items=0 ppid=2206 pid=2227 auid=501 uid=501 gid=501 euid=501 suid=501 fsuid=501 egid=501 sgid=501 fsgid=501 tty=(none) ses=1 comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1309407110.269:120): avc: denied { open } for pid=2227 comm="npviewer.bin" name="settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=AVC msg=audit(1309407110.269:120): avc: denied { read } for pid=2227 comm="npviewer.bin" name="settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=SYSCALL msg=audit(1309409972.943:121): arch=40000003 syscall=10 per=8 success=yes exit=0 a0=8c39768 a1=0 a2=18e898c a3=ffc9025c items=0 ppid=2206 pid=2227 auid=501 uid=501 gid=501 euid=501 suid=501 fsuid=501 egid=501 sgid=501 fsgid=501 tty=(none) ses=1 comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1309409972.943:121): avc: denied { unlink } for pid=2227 comm="npviewer.bin" name="settings.sol" dev=dm-2 ino=528152 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=SYSCALL msg=audit(1309413186.935:134): arch=40000003 syscall=195 per=8 success=yes exit=0 a0=83504a0 a1=ffc8f990 a2=4c665ff4 a3=ffc8fbd4 items=0 ppid=2206 pid=2227 auid=501 uid=501 gid=501 euid=501 suid=501 fsuid=501 egid=501 sgid=501 fsgid=501 tty=(none) ses=1 comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1309413186.935:134): avc: denied { getattr } for pid=2227 comm="npviewer.bin" path="/home/adamw/.macromedia/Flash_Player/#SharedObjects/2CCYWKGP/s.ytimg.com/soundData.sol" dev=dm-2 ino=658178 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=SYSCALL msg=audit(1309413186.936:135): arch=40000003 syscall=5 per=8 success=yes exit=11 a0=82ccfa0 a1=8000 a2=1b6 a3=0 items=0 ppid=2206 pid=2227 auid=501 uid=501 gid=501 euid=501 suid=501 fsuid=501 egid=501 sgid=501 fsgid=501 tty=(none) ses=1 comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1309413186.936:135): avc: denied { open } for pid=2227 comm="npviewer.bin" name="soundData.sol" dev=dm-2 ino=658178 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=AVC msg=audit(1309413186.936:135): avc: denied { read } for pid=2227 comm="npviewer.bin" name="soundData.sol" dev=dm-2 ino=658178 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file
If any of these are new AVC's then your directory is still mislabeled. Only /home/adamw should be labeled user_home_dir_t. What is the label on /home/adamw/.macromedia ls -lZd /home/adamw/.macromedia
[adamw@adam Fedora]$ ls -lZd /home/adamw/.macromedia drwx------. adamw adamw unconfined_u:object_r:nsplugin_home_t:s0 /home/adamw/.macromedia
That looks correct. restorecon -R -v ~/.macromedia
no output.
Adam, what does find /home/adamw/ -context "*:user_home_dir_t*"
[adamw@adam ~]$ find /home/adamw/ -context "*:user_home_dir_t*" /home/adamw/ /home/adamw/gnome-shell_valgrind.log -- Fedora Bugzappers volunteer triage team https://fedoraproject.org/wiki/BugZappers
Are you still getting this issue?
Just tested, and yup, still happening. A thought occurs - I'll see what happens with a fresh user account in a minute.
(In reply to comment #1) > This seems to be an SELinux problem, but an odd one: I don't get any SELinux > alert listed in sealert, nor an avc in /var/log/messages, that I can see. But > SELinux is clearly the issue, because I can reproduce or 'fix' the issue at > will simply by switching between Enforcing and Permissive. I had this problem with flash not working in firefox. The only difference was, I was receiving SELinux alerts. I didn't see them at first because I had it set to not receive alerts, so I had open sealert myself after seeing this. I can can confirm this "fixes" the issue, though. In my case I followed the work-around the SELinux instead of setting it to Permissive
this bug was fixed months ago, so whatever you're hitting it's something else/new.