FAQ Search Today's Posts Mark Forums Read
» Video Reviews

» Linux Archive

Linux-archive is a website aiming to archive linux email lists and to make them easily accessible for linux users/developers.


» Sponsor

» Partners

» Sponsor

Go Back   Linux Archive > Redhat > Fedora User

 
 
LinkBack Thread Tools
 
Old 11-03-2010, 05:49 PM
"Dr. Michael J. Chudobiak"
 
Default sun java plugin problem on Fedora 14

Hopefully this will save other people time: if you can't get the Sun jre
java plugin to work after upgrading from F13 to F14, try:

setsebool allow_execstack 1

Bad code on Sun's part.

https://bugzilla.redhat.com/show_bug.cgi?id=628031

- Mike
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
 
Old 11-04-2010, 12:00 AM
Rick Stevens
 
Default sun java plugin problem on Fedora 14

On 11/03/2010 11:49 AM, Dr. Michael J. Chudobiak wrote:
> Hopefully this will save other people time: if you can't get the Sun jre
> java plugin to work after upgrading from F13 to F14, try:
>
> setsebool allow_execstack 1
>
> Bad code on Sun's part.
>
> https://bugzilla.redhat.com/show_bug.cgi?id=628031

Also occurs on some emails if you use Thunderbird, so the bad code isn't
only on Sun's part...Mozilla has some, too.
----------------------------------------------------------------------
- Rick Stevens, Systems Engineer, C2 Hosting ricks@nerd.com -
- AIM/Skype: therps2 ICQ: 22643734 Yahoo: origrps2 -
- -
- Admitting you have a problem is the first step toward getting -
- medicated for it. -- Jim Evarts (http://www.TopFive.com) -
----------------------------------------------------------------------
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
 
Old 11-04-2010, 09:39 AM
Andrew Haley
 
Default sun java plugin problem on Fedora 14

On 11/04/2010 01:00 AM, Rick Stevens wrote:
> On 11/03/2010 11:49 AM, Dr. Michael J. Chudobiak wrote:
>> Hopefully this will save other people time: if you can't get the Sun jre
>> java plugin to work after upgrading from F13 to F14, try:
>>
>> setsebool allow_execstack 1
>>
>> Bad code on Sun's part.
>>
>> https://bugzilla.redhat.com/show_bug.cgi?id=628031

what does ls --lcontext /blah/blah/java say?

It should be

-rwxr-xr-x. 1 system_ubject_r:java_exec_t:s0 root root 36548 Oct 13 13:53 /usr/lib/jvm/jre-1.6.0-openjdk/bin/java*

The "java_exec_t" is important. I think "execmem_exec_t" would also work.

Andrew.
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
 
Old 11-04-2010, 11:33 AM
"Dr. Michael J. Chudobiak"
 
Default sun java plugin problem on Fedora 14

On 11/04/2010 06:39 AM, Andrew Haley wrote:
>>> Hopefully this will save other people time: if you can't get the Sun jre
>>> java plugin to work after upgrading from F13 to F14, try:
>>>
>>> setsebool allow_execstack 1

Whoops, there should be a "-P" in there to make the change permanent.

> what does ls --lcontext /blah/blah/java say?
> It should be
> -rwxr-xr-x. 1 system_ubject_r:java_exec_t:s0 root root 36548 Oct 13 13:53 /usr/lib/jvm/jre-1.6.0-openjdk/bin/java*
>
> The "java_exec_t" is important. I think "execmem_exec_t" would also work.

It is labelled correctly (java_exec_t), but I still needed "setsebool -P
allow_execstack 1".

[mjc@xena ~]$ ls -Z /opt/jre1.6.0_22/bin/java
-rwxr-xr-x. root root system_ubject_r:java_exec_t:s0
/opt/jre1.6.0_22/bin/java

- Mike
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
 
Old 11-04-2010, 05:47 PM
Andrew Haley
 
Default sun java plugin problem on Fedora 14

On 11/04/2010 12:33 PM, Dr. Michael J. Chudobiak wrote:
> On 11/04/2010 06:39 AM, Andrew Haley wrote:
>>>> Hopefully this will save other people time: if you can't get the Sun jre
>>>> java plugin to work after upgrading from F13 to F14, try:
>>>>
>>>> setsebool allow_execstack 1
>
> Whoops, there should be a "-P" in there to make the change permanent.
>
>> what does ls --lcontext /blah/blah/java say?
>> It should be
>> -rwxr-xr-x. 1 system_ubject_r:java_exec_t:s0 root root 36548 Oct 13 13:53 /usr/lib/jvm/jre-1.6.0-openjdk/bin/java*
>>
>> The "java_exec_t" is important. I think "execmem_exec_t" would also work.
>
> It is labelled correctly (java_exec_t), but I still needed "setsebool -P
> allow_execstack 1".
>
> [mjc@xena ~]$ ls -Z /opt/jre1.6.0_22/bin/java
> -rwxr-xr-x. root root system_ubject_r:java_exec_t:s0
> /opt/jre1.6.0_22/bin/java

It's worth checking the Firefox context too.

Allowing execstack everywhere isn't such a great idea.

Andrew.
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
 
Old 11-04-2010, 06:12 PM
"Dr. Michael J. Chudobiak"
 
Default sun java plugin problem on Fedora 14

>> It is labelled correctly (java_exec_t), but I still needed
>> "setsebool -P allow_execstack 1".
>
> It's worth checking the Firefox context too.
>
> Allowing execstack everywhere isn't such a great idea.

OK, this works too and is narrower in scope:

chcon -t execmem_exec_t /usr/lib64/firefox-3.6/firefox

- Mike
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
 

Thread Tools




All times are GMT. The time now is 11:10 AM.

VBulletin, Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.
Copyright 2007 - 2008, www.linux-archive.org