Description of problem: SELinux is preventing /usr/lib64/xulrunner/plugin-container from using the 'transition' accesses on a process. ***** Plugin catchall (100. confidence) suggests *************************** If you believe that plugin-container should be allowed transition access on processes labeled mozilla_plugin_t by default. Then you should report this as a bug. You can generate a local policy module to allow this access. Do allow this access for now by executing: # grep plugin-containe /var/log/audit/audit.log | audit2allow -M mypol # semodule -i mypol.pp Additional Information: Source Context unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c 0.c1023 Target Context unconfined_u:system_r:mozilla_plugin_t:s0-s0:c0.c1 023 Target Objects /usr/bin/pulseaudio [ process ] Source plugin-containe Source Path /usr/lib64/xulrunner/plugin-container Port <Unknown> Host (removed) Source RPM Packages xulrunner-17.0.1-1.fc18.x86_64 Target RPM Packages pulseaudio-2.1-4.fc18.x86_64 Policy RPM selinux-policy-3.11.1-60.fc18.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name (removed) Platform Linux (removed) 3.6.9-4.fc18.x86_64 #1 SMP Tue Dec 4 14:12:51 UTC 2012 x86_64 x86_64 Alert Count 1 First Seen 2012-12-10 17:23:32 CET Last Seen 2012-12-10 17:23:32 CET Local ID 03bef5b7-0126-45a5-a055-8edd185d66f7 Raw Audit Messages type=AVC msg=audit(1355156612.352:308): avc: denied { transition } for pid=2379 comm="plugin-containe" path="/usr/bin/pulseaudio" dev="dm-1" ino=1312077 scontext=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:mozilla_plugin_t:s0-s0:c0.c1023 tclass=process type=SYSCALL msg=audit(1355156612.352:308): arch=x86_64 syscall=execve success=no exit=EACCES a0=7fbb33c562c0 a1=7fff5ac18d10 a2=7fbb43e4b800 a3=15 items=0 ppid=2355 pid=2379 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=2 comm=plugin-containe exe=/usr/lib64/xulrunner/plugin-container subj=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 key=(null) Hash: plugin-containe,mozilla_plugin_t,mozilla_plugin_t,process,transition audit2allow audit2allow -R Additional info: hashmarkername: setroubleshoot kernel: 3.6.9-4.fc18.x86_64 type: libreport
This is very strange? What plugin were you running
Shockwave Flash 11.2 r202 in firefox, but dont worry, maybe its something I have done wrong, I reinstalled fedora 18 and copied my home folder , maybe my old folder is running wrongly. was just reporting in case it was something global. thanks anyway.
No it is just something I have never seen before without an application having SELinux awareness. Which I do not believe plugin-container has. This looks like plugin-container executing pulseaudio and the system attempted to transition From unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 to unconfined_u:system_r:mozilla_plugin_t:s0-s0:c0.c1023
Let's close this bug and please reopen if you see it again. Thank you.
*** Bug 1003159 has been marked as a duplicate of this bug. ***