Bug 904469 - SELinux is preventing /home/ifrit/.local/share/Steam/SteamApps/common/Half-Life/hl_linux from using the 'execheap' accesses on a process.
Summary: SELinux is preventing /home/ifrit/.local/share/Steam/SteamApps/common/Half-Li...
Keywords:
Status: CLOSED DUPLICATE of bug 904691
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy
Version: 18
Hardware: x86_64
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Miroslav Grepl
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard: abrt_hash:4082a0b46657afa25ecb44659f5...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2013-01-26 14:23 UTC by Ifrit
Modified: 2013-01-28 19:26 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2013-01-28 15:51:42 UTC
Type: ---
Embargoed:

Attachments (Terms of Use)

Description Ifrit 2013-01-26 14:23:27 UTC 
Description of problem:
I started Counter-Strike beta

Additional info:
hashmarkername: setroubleshoot
kernel:         3.7.2-204.fc18.x86_64
type:           libreport
Comment 1 Miroslav Grepl 2013-01-28 11:03:20 UTC 
Could you try to resubmit the report together with AVC msg. Then the alert should tell you what to do in this report.
Comment 2 Daniel Walsh 2013-01-28 15:51:42 UTC 
This seems like SteamFortress code is noit well written, for Linux

*** This bug has been marked as a duplicate of bug 904691 ***
Comment 3 John Drinkwater 2013-01-28 15:54:33 UTC 
Not a dupe of #904691 TF2 & Half Life don’t share the same codebase.

This bug should help provide the AVC messages needed https://github.com/ValveSoftware/steam-for-linux/issues/946#issuecomment-12758498

type=AVC msg=audit(1359244146.352:92): avc: denied { execheap } for pid=2354 comm="hl_linux" scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=process
Comment 4 Daniel Walsh 2013-01-28 19:26:47 UTC 
Well they probably share the same coding standard.  

Here is an explanation of the SELinux Memory Controls.

http://www.akkadia.org/drepper/selinux-mem.html
Note You need to log in before you can comment on or make changes to this bug.