Linux Archive

Linux Archive (
-   Fedora SELinux Support (
-   -   miss-match between needs and setroubleshooter's output recommendations (

Gene Heskett 01-07-2008 07:50 AM

miss-match between needs and setroubleshooter's output recommendations

I have now been in the center ring of this circus about long enough. selinux
is about to get made permissive or disabled.

I have now issued these commands:

[root@coyote ~]# semanage fcontext -a -t
textrel_shlib_t /root/.mozilla/plugins/
[root@coyote ~]# chcon -t textrel_shlib_t /root/.mozilla/plugins/
[root@coyote ~]# semanage fcontext -a -t
textrel_shlib_t /root/.mozilla/plugins/
[root@coyote ~]# chcon -t textrel_shlib_t /root/.mozilla/plugins/

Twice as can be seen, and restarted firefox each time, and each time selinux
denies firefox a plugin it needs to pay this site:

I now have the third denial showing in the setroubleshooter's screen.

How can I fix this?


Cheers, Gene
"There are four boxes to be used in defense of liberty:<>
soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Q: How many Zen masters does it take to screw in a light bulb?
A: None. The Universe spins the bulb, and the Zen master stays out
of the way.

fedora-selinux-list mailing list

Daniel J Walsh 01-08-2008 09:44 AM

miss-match between needs and setroubleshooter's output recommendations
Hash: SHA1

Gene Heskett wrote:
> On Monday 07 January 2008, Daniel J Walsh wrote:
>> ausearch -m avc
> That returned a bunch of stuff starting on the 5th, and includes a whole bunch
> of hits from procmail, log related I think, but the /var/log/procmail.log is
> being generated ok ANAICT. I have a tail sitting on it now.
> So I trimmed that output to just today and its attached. Still 170kb though.
> And yes, FF is being run as root. I'm working on fixing me to do all this,
> but its damnedably difficult to do when I am being denied su and sudo,
> despite putting myself in the sudoers list with visudo, when logged in as me,
> so I have to run as root in order to actually get anything done. Yes, I am
> doing a lot of copying, and chown'ing while trying to get an environment
> setup for me that duplicates what root can do.
> Also, none of you guys have headers that allow me to reply all, the addresses
> are missing, so I have to do a simple reply which goes to you, and then add
> the address by hand. I'm assuming you want
> this in the archive anyway.
Also what OS version is this?

Version: GnuPG v1.4.8 (GNU/Linux)
Comment: Using GnuPG with Fedora -


fedora-selinux-list mailing list

All times are GMT. The time now is 05:46 AM.

VBulletin, Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.