libreport version: 2.0.6
executable:     /usr/bin/python
hashmarkername: setroubleshoot
kernel:         3.1.0-0.rc6.git0.3.fc16.x86_64
reason:         SELinux is preventing /usr/lib64/nspluginwrapper/npviewer.bin from 'write' accesses on the file /home/rgrinblatt/.mozilla/firefox/dxb24meb.default/.parentlock.
time:           Mon Oct 24 22:25:32 2011

description:
:SELinux is preventing /usr/lib64/nspluginwrapper/npviewer.bin from 'write' accesses on the file /home/rgrinblatt/.mozilla/firefox/dxb24meb.default/.parentlock.
:
:*****  Plugin restorecon (98.5 confidence) suggests  *************************
:
:If you want to fix the label. 
:/home/rgrinblatt/.mozilla/firefox/dxb24meb.default/.parentlock default label should be mozilla_home_t.
:Then you can run restorecon.
:Do
:# /sbin/restorecon -v /home/rgrinblatt/.mozilla/firefox/dxb24meb.default/.parentlock
:
:*****  Plugin leaks (1.48 confidence) suggests  ******************************
:
:If you want to ignore npviewer.bin trying to write access the .parentlock file, because you believe it should not need this access.
:Then you should report this as a bug.  
:You can generate a local policy module to dontaudit this access.
:Do
:# grep /usr/lib64/nspluginwrapper/npviewer.bin /var/log/audit/audit.log | audit2allow -D -M mypol
:# semodule -i mypol.pp
:
:*****  Plugin catchall (1.48 confidence) suggests  ***************************
:
:If you believe that npviewer.bin should be allowed write access on the .parentlock file by default.
:Then you should report this as a bug.
:You can generate a local policy module to allow this access.
:Do
:allow this access for now by executing:
:# grep npviewer.bin /var/log/audit/audit.log | audit2allow -M mypol
:# semodule -i mypol.pp
:
:Additional Information:
:Source Context                unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c102
:                              3
:Target Context                system_u:object_r:dosfs_t:s0
:Target Objects                /home/rgrinblatt/.mozilla/firefox/dxb24meb.default
:                              /.parentlock [ file ]
:Source                        npviewer.bin
:Source Path                   /usr/lib64/nspluginwrapper/npviewer.bin
:Port                          <Unknown>
:Host                          (removed)
:Source RPM Packages           nspluginwrapper-1.4.4-2.fc16
:Target RPM Packages           
:Policy RPM                    selinux-policy-3.10.0-46.fc16
:Selinux Enabled               True
:Policy Type                   targeted
:Enforcing Mode                Enforcing
:Host Name                     (removed)
:Platform                      Linux (removed) 3.1.0-0.rc6.git0.3.fc16.x86_64 #1
:                              SMP Fri Sep 16 12:26:22 UTC 2011 x86_64 x86_64
:Alert Count                   1
:First Seen                    Mon 24 Oct 2011 10:22:43 PM EDT
:Last Seen                     Mon 24 Oct 2011 10:22:43 PM EDT
:Local ID                      8ca20c96-26e3-4c69-a2c1-309ff0366cb2
:
:Raw Audit Messages
:type=AVC msg=audit(1319509363.787:170): avc:  denied  { write } for  pid=1783 comm="npviewer.bin" path="/home/rgrinblatt/.mozilla/firefox/dxb24meb.default/.parentlock" dev=sda5 ino=7865277 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=system_u:object_r:dosfs_t:s0 tclass=file
:
:
:type=AVC msg=audit(1319509363.787:170): avc:  denied  { read write } for  pid=1783 comm="npviewer.bin" path="/home/rgrinblatt/.mozilla/firefox/dxb24meb.default/places.sqlite-shm" dev=sda5 ino=7865313 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=system_u:object_r:dosfs_t:s0 tclass=file
:
:
:type=AVC msg=audit(1319509363.787:170): avc:  denied  { read } for  pid=1783 comm="npviewer.bin" path="/home/rgrinblatt/.mozilla/firefox/dxb24meb.default/extensions/{1018e4d6-728f-4b20-ad56-37578a4de76b}/ip4.db" dev=sda5 ino=7865109 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=system_u:object_r:dosfs_t:s0 tclass=file
:
:
:type=AVC msg=audit(1319509363.787:170): avc:  denied  { read } for  pid=1783 comm="npviewer.bin" path="/home/rgrinblatt/.mozilla/firefox/dxb24meb.default/extensions/{1018e4d6-728f-4b20-ad56-37578a4de76b}/ip6.db" dev=sda5 ino=7865107 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=system_u:object_r:dosfs_t:s0 tclass=file
:
:
:type=AVC msg=audit(1319509363.787:170): avc:  denied  { read write } for  pid=1783 comm="npviewer.bin" path="/home/rgrinblatt/.mozilla/firefox/dxb24meb.default/cookies.sqlite-shm" dev=sda5 ino=7865252 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=system_u:object_r:dosfs_t:s0 tclass=file
:
:
:type=SYSCALL msg=audit(1319509363.787:170): arch=x86_64 syscall=execve success=yes exit=0 a0=1c4cd80 a1=1c4cc80 a2=1c4fd10 a3=8 items=0 ppid=1738 pid=1783 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=4 comm=npviewer.bin exe=/usr/lib64/nspluginwrapper/npviewer.bin subj=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 key=(null)
:
:Hash: npviewer.bin,nsplugin_t,dosfs_t,file,write
:
:audit2allow
:
:#============= nsplugin_t ==============
:allow nsplugin_t dosfs_t:file { write read };
:
:audit2allow -R
:
:#============= nsplugin_t ==============
:allow nsplugin_t dosfs_t:file { write read };
: