miss-match between needs and setroubleshooter's output recommendations
 

Greetings;

I have now been in the center ring of this circus about long enough. selinux
is about to get made permissive or disabled.

I have now issued these commands:

[root@coyote ~]# semanage fcontext -a -t
textrel_shlib_t /root/.mozilla/plugins/vorbisrend.so
[root@coyote ~]# chcon -t textrel_shlib_t /root/.mozilla/plugins/vorbisrend.so
[root@coyote ~]# semanage fcontext -a -t
textrel_shlib_t /root/.mozilla/plugins/vorbisrend.so
[root@coyote ~]# chcon -t textrel_shlib_t /root/.mozilla/plugins/vorbisrend.so

Twice as can be seen, and restarted firefox each time, and each time selinux
denies firefox a plugin it needs to pay this site:
<http://ed-tharp.kicks-ass.org/ridingmower.mpg>

I now have the third denial showing in the setroubleshooter's screen.
-----------------

How can I fix this?

Thanks.

--
Cheers, Gene
"There are four boxes to be used in defense of liberty:<>
soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Q: How many Zen masters does it take to screw in a light bulb?
A: None. The Universe spins the bulb, and the Zen master stays out
of the way.

--
fedora-selinux-list mailing list
fedora-selinux-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

miss-match between needs and setroubleshooter's output recommendations
 

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Gene Heskett wrote:
> On Monday 07 January 2008, Daniel J Walsh wrote:
>> ausearch -m avc
>
> That returned a bunch of stuff starting on the 5th, and includes a whole bunch
> of hits from procmail, log related I think, but the /var/log/procmail.log is
> being generated ok ANAICT. I have a tail sitting on it now.
>
> So I trimmed that output to just today and its attached. Still 170kb though.
>
> And yes, FF is being run as root. I'm working on fixing me to do all this,
> but its damnedably difficult to do when I am being denied su and sudo,
> despite putting myself in the sudoers list with visudo, when logged in as me,
> so I have to run as root in order to actually get anything done. Yes, I am
> doing a lot of copying, and chown'ing while trying to get an environment
> setup for me that duplicates what root can do.
>
> Also, none of you guys have headers that allow me to reply all, the addresses
> are missing, so I have to do a simple reply which goes to you, and then add
> the fedora-selinux-list@redhat.com address by hand. I'm assuming you want
> this in the archive anyway.
>
>
Also what OS version is this?


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkeDVBEACgkQrlYvE4MpobMnhACfQcebVPnBIR IXG8xbDXm7wvdP
fsgAoIswstUar3WNI/z07ouTcqFcrXlH
=b4zT
-----END PGP SIGNATURE-----

--
fedora-selinux-list mailing list
fedora-selinux-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-selinux-list