Red Hat Bugzilla – Bug 743606
SELinux policy preventing nspluginwrapper from wrapping Flash 11.0.1.152
Last modified: 2011-10-19 00:30:39 EDT
Description of problem: After Adobe Flash is updated to the specified version, Flash-based websites stopped working. When re-running mozilla-plugin-config by hand, it revealed the following error: $ sudo mozilla-plugin-config -i *** NSPlugin Viewer *** ERROR: /usr/lib/mozilla/plugins/libflashplayer.so: cannot restore segment prot after reloc: Permission denied *** NSPlugin Viewer *** ERROR: /usr/lib/mozilla/plugins/libflashplayer.so: cannot restore segment prot after reloc: Permission denied With setenforce 0, mozilla-plugin-config succeeds in rewrapping the new Flash plugin. Version-Release number of selected component (if applicable): selinux-policy-targeted-3.10.0-36.fc16.noarch nspluginwrapper-1.4.4-1.fc16.x86_64 nspluginwrapper-1.4.4-1.fc16.i686 flash-plugin-11.0.1.152-release.i386 How reproducible: Always Steps to Reproduce: 1. Follow the instructions from http://fedoraproject.org/wiki/Flash#32_bit_wrapped_version 2. sudo mozilla-plugin-config -i Actual results: Error restoring segment protection after relocation, as above Expected results: Should work without error as with previous Flash versions Additional info:
Although this bug should be dealt with, Adobe now has full 64-bit support (both a 64-bit plugin and a corresponding repo). Just go to http://get.adobe.com/flashplayer/ , select "YUM for Linux (YUM)", download and install adobe-release-x86_64-1.0-1.noarch.rpm, and install flash-plugin from the repo. The instructions on the Flash wiki need to be updated.
Aha, thanks! I'll switch one of my computer to the 64-bit plugin, and keep one with the 32-bit to check if the bug is fixed
/usr/lib/mozilla/plugins/libflashplayer.so Looks like an old flash player, we have not needed this to be labeled textrel_shlib_t in quite a while
Note that nsplugginwrapper is also required in order to run flash (which uses gtk2) under epiphany 3.x (which uses gtk3), so "use 64 bit flash" isn't a total workaround.
Fixed in -39.fc16 release.
selinux-policy-3.10.0-40.fc16 has been submitted as an update for Fedora 16. https://admin.fedoraproject.org/updates/selinux-policy-3.10.0-40.fc16
Package selinux-policy-3.10.0-40.fc16: * should fix your issue, * was pushed to the Fedora 16 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing selinux-policy-3.10.0-40.fc16' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2011-14363 then log in and leave karma (feedback).
selinux-policy-3.10.0-40.fc16 has been pushed to the Fedora 16 stable repository. If problems still persist, please make note of it in this bug report.