<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN"> <HTML> <HEAD> <META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"> <META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7226.0"> <TITLE>RE: Adobe Reader 7</TITLE> </HEAD> <BODY>  On Sat 4/9/2005 8:15 PM, Colin Walters wrote: > On Sat, 2005-04-09 at 07:40 +0000, Fred New wrote: > > > Is this a correct and accepted way of dealing with this without > > installing the policy sources? > > What denials were you getting? We don't presently confine user logins > with SELinux, so Adobe Reader should not have been affected. > Unfortunately, this problem seems to be "dontaudited"; I don't see anything in /var/log/messages. If I run it from a terminal, I see [fred@darth ~]$ /usr/local/Adobe/Acrobat7.0/bin/acroread /usr/local/Adobe/Acrobat7.0/Reader/intellinux/bin/acroread: error while loading shared libraries: /usr/local/Adobe/Acrobat7.0/Reader/intellinux/lib/libJP2K.so: cannot restore segment prot after reloc: Permission denied [fred@darth ~]$ But Adobe Reader runs if I go into permissive mode or if I make the context changes previously mentioned. The restorecon command leaves everything with a type of usr_t. I installed Adobe Reader by expanding the tar.gz file as a normal user and running the INSTALL script as root. Fred </BODY> </HTML>