Created attachment 593807 [details] SE Troubleshoot Details Description of problem: Every time I open a web page with flash on it: "SELinux is preventing /usr/lib64/xulrunner-2/plugin-container from read access on the file pulse-shm-921379035." Version-Release number of selected component (if applicable): selinux-policy-targeted-3.10.0-132.fc17.noarch How reproducible: Open a web page with flash and the browser hangs for a moment, then the error happens and the web page loads fine. Steps to Reproduce: 1. 2. 3. Actual results: Expected results: Additional info: This used to work without a hitch in F16.
What does # ls -lZ /dev/shm* Are you able to re-create it? I think it was one-time issue.
It wasn't just a one-time issue here, but affected this computer for weeks, but it appears to have miraculously disappeared overnight. I am no longer able to recreate it. ls -Z /dev/shm* shows: -r--------. peter peter unconfined_u:object_r:user_tmpfs_t:s0 pulse-shm-1793422992 -r--------. peter peter unconfined_u:object_r:user_tmpfs_t:s0 pulse-shm-1963161163 -r--------. peter peter unconfined_u:object_r:user_tmpfs_t:s0 pulse-shm-2018376722 -r--------. peter peter unconfined_u:object_r:user_tmpfs_t:s0 pulse-shm-3181137390
Ok reopen if it happens again.
It just happened again. I am suspecting that it might have something to do with suspend/resume. After a resume, it appears to fail. This morning, when I said it was fine, I had just done a machine start.
Created attachment 594313 [details] output
here is the result of ls -Z again: -r--------. peter peter unconfined_u:object_r:user_tmpfs_t:s0 pulse-shm-1232624848 -r--------. peter peter unconfined_u:object_r:user_tmpfs_t:s0 pulse-shm-1793422992 -r--------. peter peter unconfined_u:object_r:user_tmpfs_t:s0 pulse-shm-1963161163 -r--------. peter peter unconfined_u:object_r:user_tmpfs_t:s0 pulse-shm-2018376722 -r--------. peter peter unconfined_u:object_r:mozilla_plugin_tmpfs_t:s0 pulse-shm-3898524044
Created attachment 594325 [details] output part 2 These 2 denials ocurred as a pair, this one was really the first of the two.
Ok, so you have opened web page and then you suspend/resume your machine, right?
(In reply to comment #8) > Ok, so you have opened web page and then you suspend/resume your machine, > right? Wrong. I suspend the machine and when I am ready to use it again, I resume the machine. Now, I open the web page and the denial occurs.
Might be a kernel issue if after a resume a tmpfs file comes up with a different label.