Bug 903167 - SELinux is preventing /opt/Adobe/Reader8/Reader/intellinux/bin/acroread from 'create' accesses on the file e18802.pdf.
Summary: SELinux is preventing /opt/Adobe/Reader8/Reader/intellinux/bin/acroread from ...
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy
Version: 17
Hardware: i686
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Miroslav Grepl
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard: abrt_hash:c59164c3eed807d70501443cd96...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2013-01-23 11:05 UTC by Carlos Rodríguez
Modified: 2013-01-23 18:40 UTC (History)
3 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2013-01-23 18:40:43 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)
File: type (9 bytes, text/plain)
2013-01-23 11:05 UTC, Carlos Rodríguez
no flags Details
File: hashmarkername (14 bytes, text/plain)
2013-01-23 11:05 UTC, Carlos Rodríguez
no flags Details

Description Carlos Rodríguez 2013-01-23 11:05:43 UTC
Additional info:
libreport version: 2.0.18
kernel:         3.6.11-1.fc17.i686

description:
:SELinux is preventing /opt/Adobe/Reader8/Reader/intellinux/bin/acroread from 'create' accesses on the file e18802.pdf.
:
:*****  Plugin catchall (100. confidence) suggests  ***************************
:
:If cree que de manera predeterminada, acroread debería permitir acceso create sobre  e18802.pdf file.     
:Then debería reportar esto como un error.
:Puede generar un módulo de política local para permitir este acceso.
:Do
:permita el acceso momentáneamente executando:
:# grep acroread /var/log/audit/audit.log | audit2allow -M mypol
:# semodule -i mypol.pp
:
:Additional Information:
:Source Context                unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c
:                              0.c1023
:Target Context                unconfined_u:object_r:user_home_dir_t:s0
:Target Objects                e18802.pdf [ file ]
:Source                        acroread
:Source Path                   /opt/Adobe/Reader8/Reader/intellinux/bin/acroread
:Port                          <Desconocido>
:Host                          (removed)
:Source RPM Packages           AdobeReader_esp-8.1.7-1.i486
:Target RPM Packages           
:Policy RPM                    selinux-policy-3.10.0-166.fc17.noarch
:Selinux Enabled               True
:Policy Type                   targeted
:Enforcing Mode                Enforcing
:Host Name                     (removed)
:Platform                      Linux (removed) 3.6.11-1.fc17.i686 #1 SMP Mon Dec
:                              17 22:52:59 UTC 2012 i686 i686
:Alert Count                   1
:First Seen                    2013-01-23 05:04:19 CST
:Last Seen                     2013-01-23 05:04:19 CST
:Local ID                      78a93922-61a9-48de-a571-3aafedd82d3d
:
:Raw Audit Messages
:type=AVC msg=audit(1358939059.52:118): avc:  denied  { create } for  pid=2599 comm="acroread" name="e18802.pdf" scontext=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file
:
:
:type=SYSCALL msg=audit(1358939059.52:118): arch=i386 syscall=open per=400000 success=no exit=EACCES a0=a286e70 a1=242 a2=180 a3=70 items=0 ppid=2594 pid=2599 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=2 comm=acroread exe=/opt/Adobe/Reader8/Reader/intellinux/bin/acroread subj=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 key=(null)
:
:Hash: acroread,mozilla_plugin_t,user_home_dir_t,file,create
:
:audit2allow
:
:#============= mozilla_plugin_t ==============
:allow mozilla_plugin_t user_home_dir_t:file create;
:
:audit2allow -R
:
:#============= mozilla_plugin_t ==============
:allow mozilla_plugin_t user_home_dir_t:file create;
:

Comment 1 Carlos Rodríguez 2013-01-23 11:05:51 UTC
Created attachment 685827 [details]
File: type

Comment 2 Carlos Rodríguez 2013-01-23 11:05:59 UTC
Created attachment 685828 [details]
File: hashmarkername

Comment 3 Daniel Walsh 2013-01-23 18:40:43 UTC
# setsebool unconfined_mozilla_plugin_transition 0

If you want to save content from the adobe plugin, you need to turn off plugin confinement.


Note You need to log in before you can comment on or make changes to this bug.