<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
Was poking around in the selinux FAQs fro FC 5 and found:<br>
<blockquote><b>Q:</b>
<p> I have a process running as <code class="computeroutput">unconfined_t</code>,
and SELinux is still preventing my application from running. </p>
<b>A:</b>
<p> We have begun to confine the <code class="computeroutput">unconfined_t</code>
domain somewhat. SELinux restricts certain memory protection operation.
Following is a list of those denials, as well as possible reasons and
solutions for those denials. For more information on these
restrictions, see <a
href="http://people.redhat.com/drepper/selinux-mem.html" target="_top">http://people.redhat.com/drepper/selinux-mem.html</a>.
</p>
<div class="variablelist">
<dl>
<dt><span class="term"><code class="computeroutput">execmod</code></span></dt>
<dd>
<p> This is usually based on a library label. You can change the
context on the library with the <span><strong class="command">chcon -t
testrel_shlib_t <em class="replaceable"><code>LIBRARY</code></em></strong></span>.
Now your application can run. Please report this as a bugzilla.</p>
</dd>
</dl>
</div>
</blockquote>
So I tried that with the library that was getting this avc: <br>
<blockquote>Apr 1 16:35:26 gei kernel: audit(1143927326.008:7224):
avc: denied { execmod } for pid=12193 comm="acroread"
name="libJP2K.so" dev=dm-0 ino=682112
scontext=user_u:system_r:unconfined_t:s0-s0:c0.c255
tcontext=system_u:object_r:lib_t:s0 tclass=file<br>
</blockquote>
I did this:<br>
<blockquote>chcon -t testrel_shlib_t
/usr/local/Adobe/Acrobat7.0/Reader/intellinux/lib/libJP2K.so<br>
</blockquote>
<div class="variablelist">and got this error:<br>
<blockquote>chcon: failed to change context of
/usr/local/Adobe/Acrobat7.0/Reader/intellinux/lib/libJP2K.so to
system_u:object_r:testrel_shlib_t: Invalid argument<br>
</blockquote>
So now what?<br>
</div>
<br>
Regards,<br>
John<br>
<br>
</body>
</html>