SElinux

[Antonio Olivares]

--- Craig White <craigwhite at azapple.com> wrote:

> On Sun, 2006-04-02 at 03:05 +0100, Leon wrote:
> > Thank you Craig and Kam. However selinux will
> disable flash plugin for
> > firefox, prevent mplayer from playing .mkv files,
> etc. All of these
> > are quite essential for desktop users.
>

For flashplayer troubles, all you need to do is the
following as Justin told me to do on the
fedora-test-list 


Check the context of it with "ls -Z" the change it
to whats i'm my example
below with "chcon"

ls -Z
-rwxr-xr-x olivares olivares 
user_u:object_r:user_home_t
flashplayer.xpt
-rwxr-xr-x olivares olivares
user_u:object_r:user_home_t
libflashplayer.so

Changed to

chcon system_u:object_r:texrel_shlib_t
flashplayer.xpt libflashplayer.so 

And flashplayer worked!!  For mplayer, I have not had
any problems with it.  I can view yahoo movie clips
and all with the mplayer plugin.  

Selinux should not be disabled for little things like
this.  You can find workarounds.  Selinux is here to
help you and protect you from unwanted stuff as Craig
and others have pointed out to you.  Java is also
tricky with selinux, but look for the
workarounds/solutions.  

Regards,

Antonio

> ----
> The point of security is to stop all non approved
> actions.
> 
> If you install the flash plugin and the flash plugin
> doesn't provide
> security contexts for its use, then you will have to
> fix that issue...I
> believe the answers to flash plugin problems with
> SELinux are asily
> solvable.
> 
> I don't know anything about mplayer issues with
> SELinux but I would
> assume that if a user posts the errors caused by
> using mplayer as you
> suggest, he will find out that a fix is again a
> relatively simple
> process.
> 
> If you wish to disable SELinux because you don't
> have the enthusiasm for
> learning a technology that is incorporated as a
> layer of security for
> your protection, you would not be the first or the
> last to do so, but
> please recognize that what you are doing is
> depriving your system of a
> layer of security because you have found means to
> justify not learning
> how to live with it.
> 
> Some effort has been spent to educate and provide
> better tools for the
> system user - you may wish to start here...
> 
> http://fedoraproject.org/wiki/SELinux
> 
> or of course, disable it, be done with it and just
> remember, the next
> time you tell your friends that Linux is more secure
> than Windows...that
> you have opted out of some of those security layers.
> 
> Craig
> 
> -- 
> fedora-list mailing list
> fedora-list at redhat.com
> To unsubscribe:
> https://www.redhat.com/mailman/listinfo/fedora-list
> 


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com