[SELinux] play real media files with no video
Daniel J Walsh
dwalsh at redhat.com
Mon Apr 3 18:20:48 UTC 2006
Leon wrote:
> Hi there,
>
> I have googled and can't find a solution. Most of the install notes
> out there don't mention this problem, so it might be specific to my
> machine though I doubt it.
>
> After reading threads of SELinux in this group, I feel like enabling
> SELinux. The safety of my data is far more important. However, when
> setting SELinux to enforcing, realplay plays rm media files with no
> pictures.
>
> Attached is the full audit log. Thank you in advance.
>
>
> ------------------------------------------------------------------------
>
> type=AVC msg=audit(1143984221.042:280): avc: granted { execmem } for pid=3834 comm="realplay.bin" scontext=user_u:system_r:unconfined_t:s0 tcontext=user_u:system_r:unconfined_t:s0 tclass=process
> type=SYSCALL msg=audit(1143984221.042:280): arch=40000003 syscall=192 success=yes exit=14606336 a0=0 a1=a01000 a2=7 a3=22 items=0 pid=3834 auid=501 uid=501 gid=500 euid=501 suid=501 fsuid=501 egid=500 sgid=500 fsgid=500 comm="realplay.bin" exe="/opt/nonfree.APPS/RealPlayer10/realplay.bin"
> type=AVC msg=audit(1143984221.046:281): avc: granted { execmem } for pid=3834 comm="realplay.bin" scontext=user_u:system_r:unconfined_t:s0 tcontext=user_u:system_r:unconfined_t:s0 tclass=process
> type=SYSCALL msg=audit(1143984221.046:281): arch=40000003 syscall=192 success=yes exit=25096192 a0=0 a1=a01000 a2=7 a3=22 items=0 pid=3834 auid=501 uid=501 gid=500 euid=501 suid=501 fsuid=501 egid=500 sgid=500 fsgid=500 comm="realplay.bin" exe="/opt/nonfree.APPS/RealPlayer10/realplay.bin"
> type=AVC msg=audit(1143984221.046:282): avc: granted { execmem } for pid=3834 comm="realplay.bin" scontext=user_u:system_r:unconfined_t:s0 tcontext=user_u:system_r:unconfined_t:s0 tclass=process
> type=SYSCALL msg=audit(1143984221.046:282): arch=40000003 syscall=192 success=yes exit=43130880 a0=0 a1=a01000 a2=7 a3=22 items=0 pid=3834 auid=501 uid=501 gid=500 euid=501 suid=501 fsuid=501 egid=500 sgid=500 fsgid=500 comm="realplay.bin" exe="/opt/nonfree.APPS/RealPlayer10/realplay.bin"
> type=AVC msg=audit(1143984221.046:283): avc: granted { execmem } for pid=3839 comm="realplay.bin" scontext=user_u:system_r:unconfined_t:s0 tcontext=user_u:system_r:unconfined_t:s0 tclass=process
> type=SYSCALL msg=audit(1143984221.046:283): arch=40000003 syscall=192 success=yes exit=53620736 a0=0 a1=a01000 a2=7 a3=22 items=0 pid=3839 auid=501 uid=501 gid=500 euid=501 suid=501 fsuid=501 egid=500 sgid=500 fsgid=500 comm="realplay.bin" exe="/opt/nonfree.APPS/RealPlayer10/realplay.bin"
> type=AVC msg=audit(1143984221.058:284): avc: denied { execmod } for pid=3834 comm="realplay.bin" name="vidsite.so" dev=hda2 ino=1141873 scontext=user_u:system_r:unconfined_t:s0 tcontext=user_u:object_r:usr_t:s0 tclass=file
> type=SYSCALL msg=audit(1143984221.058:284): arch=40000003 syscall=125 success=no exit=-13 a0=c39000 a1=4d000 a2=5 a3=bf8cb770 items=0 pid=3834 auid=501 uid=501 gid=500 euid=501 suid=501 fsuid=501 egid=500 sgid=500 fsgid=500 comm="realplay.bin" exe="/opt/nonfree.APPS/RealPlayer10/realplay.bin"
> type=AVC_PATH msg=audit(1143984221.058:284): path="/opt/nonfree.APPS/RealPlayer10/plugins/vidsite.so"
> type=AVC msg=audit(1143984221.058:285): avc: denied { execmod } for pid=3834 comm="realplay.bin" name="vidsite.so" dev=hda2 ino=1141873 scontext=user_u:system_r:unconfined_t:s0 tcontext=user_u:object_r:usr_t:s0 tclass=file
> type=SYSCALL msg=audit(1143984221.058:285): arch=40000003 syscall=125 success=no exit=-13 a0=c39000 a1=4d000 a2=5 a3=bf8cb5d0 items=0 pid=3834 auid=501 uid=501 gid=500 euid=501 suid=501 fsuid=501 egid=500 sgid=500 fsgid=500 comm="realplay.bin" exe="/opt/nonfree.APPS/RealPlayer10/realplay.bin"
> type=AVC_PATH msg=audit(1143984221.058:285): path="/opt/nonfree.APPS/RealPlayer10/plugins/vidsite.so"
> type=AVC msg=audit(1143984221.062:286): avc: denied { execmod } for pid=3834 comm="realplay.bin" name="oggfformat.so" dev=hda2 ino=1141883 scontext=user_u:system_r:unconfined_t:s0 tcontext=user_u:object_r:usr_t:s0 tclass=file
> type=SYSCALL msg=audit(1143984221.062:286): arch=40000003 syscall=125 success=no exit=-13 a0=4a9000 a1=14000 a2=5 a3=bf8cb5d0 items=0 pid=3834 auid=501 uid=501 gid=500 euid=501 suid=501 fsuid=501 egid=500 sgid=500 fsgid=500 comm="realplay.bin" exe="/opt/nonfree.APPS/RealPlayer10/realplay.bin"
> type=AVC_PATH msg=audit(1143984221.062:286): path="/opt/nonfree.APPS/RealPlayer10/plugins/oggfformat.so"
> type=AVC msg=audit(1143984221.070:287): avc: denied { execmod } for pid=3834 comm="realplay.bin" name="vorbisrend.so" dev=hda2 ino=1141899 scontext=user_u:system_r:unconfined_t:s0 tcontext=user_u:object_r:usr_t:s0 tclass=file
> type=SYSCALL msg=audit(1143984221.070:287): arch=40000003 syscall=125 success=no exit=-13 a0=d31000 a1=27000 a2=5 a3=bf8cb5d0 items=0 pid=3834 auid=501 uid=501 gid=500 euid=501 suid=501 fsuid=501 egid=500 sgid=500 fsgid=500 comm="realplay.bin" exe="/opt/nonfree.APPS/RealPlayer10/realplay.bin"
> type=AVC_PATH msg=audit(1143984221.070:287): path="/opt/nonfree.APPS/RealPlayer10/plugins/vorbisrend.so"
> type=AVC msg=audit(1143984221.074:288): avc: denied { execmod } for pid=3834 comm="realplay.bin" name="theorarend.so" dev=hda2 ino=1141909 scontext=user_u:system_r:unconfined_t:s0 tcontext=user_u:object_r:usr_t:s0 tclass=file
> type=SYSCALL msg=audit(1143984221.074:288): arch=40000003 syscall=125 success=no exit=-13 a0=224f000 a1=3d000 a2=5 a3=bf8cb5d0 items=0 pid=3834 auid=501 uid=501 gid=500 euid=501 suid=501 fsuid=501 egid=500 sgid=500 fsgid=500 comm="realplay.bin" exe="/opt/nonfree.APPS/RealPlayer10/realplay.bin"
> type=AVC_PATH msg=audit(1143984221.074:288): path="/opt/nonfree.APPS/RealPlayer10/plugins/theorarend.so"
> type=AVC msg=audit(1143984221.078:289): avc: denied { execmod } for pid=3834 comm="realplay.bin" name="swfrender.so" dev=hda2 ino=1141914 scontext=user_u:system_r:unconfined_t:s0 tcontext=user_u:object_r:usr_t:s0 tclass=file
> type=SYSCALL msg=audit(1143984221.078:289): arch=40000003 syscall=125 success=no exit=-13 a0=54c8000 a1=85000 a2=5 a3=bf8cb5d0 items=0 pid=3834 auid=501 uid=501 gid=500 euid=501 suid=501 fsuid=501 egid=500 sgid=500 fsgid=500 comm="realplay.bin" exe="/opt/nonfree.APPS/RealPlayer10/realplay.bin"
> type=AVC_PATH msg=audit(1143984221.078:289): path="/opt/nonfree.APPS/RealPlayer10/plugins/swfrender.so"
> type=AVC msg=audit(1143984221.082:290): avc: denied { execmod } for pid=3834 comm="realplay.bin" name="vidsite.so" dev=hda2 ino=1141873 scontext=user_u:system_r:unconfined_t:s0 tcontext=user_u:object_r:usr_t:s0 tclass=file
> type=SYSCALL msg=audit(1143984221.082:290): arch=40000003 syscall=125 success=no exit=-13 a0=226e000 a1=4d000 a2=5 a3=bf8cb690 items=0 pid=3834 auid=501 uid=501 gid=500 euid=501 suid=501 fsuid=501 egid=500 sgid=500 fsgid=500 comm="realplay.bin" exe="/opt/nonfree.APPS/RealPlayer10/realplay.bin"
> type=AVC_PATH msg=audit(1143984221.082:290): path="/opt/nonfree.APPS/RealPlayer10/plugins/vidsite.so"
> type=AVC msg=audit(1143984221.250:291): avc: granted { execmem } for pid=3835 comm="realplay.bin" scontext=user_u:system_r:unconfined_t:s0 tcontext=user_u:system_r:unconfined_t:s0 tclass=process
> type=SYSCALL msg=audit(1143984221.250:291): arch=40000003 syscall=192 success=yes exit=77131776 a0=0 a1=a01000 a2=7 a3=22 items=0 pid=3835 auid=501 uid=501 gid=500 euid=501 suid=501 fsuid=501 egid=500 sgid=500 fsgid=500 comm="realplay.bin" exe="/opt/nonfree.APPS/RealPlayer10/realplay.bin"
> type=AVC msg=audit(1143984221.250:292): avc: granted { execmem } for pid=3835 comm="realplay.bin" scontext=user_u:system_r:unconfined_t:s0 tcontext=user_u:system_r:unconfined_t:s0 tclass=process
> type=SYSCALL msg=audit(1143984221.250:292): arch=40000003 syscall=192 success=yes exit=92442624 a0=0 a1=a01000 a2=7 a3=22 items=0 pid=3835 auid=501 uid=501 gid=500 euid=501 suid=501 fsuid=501 egid=500 sgid=500 fsgid=500 comm="realplay.bin" exe="/opt/nonfree.APPS/RealPlayer10/realplay.bin"
> type=AVC msg=audit(1143984222.150:293): avc: denied { execmod } for pid=3834 comm="realplay.bin" name="drvc.so" dev=hda2 ino=1107020 scontext=user_u:system_r:unconfined_t:s0 tcontext=user_u:object_r:usr_t:s0 tclass=file
> type=SYSCALL msg=audit(1143984222.150:293): arch=40000003 syscall=125 success=no exit=-13 a0=3fbb000 a1=4d000 a2=5 a3=bf8cb5d0 items=0 pid=3834 auid=501 uid=501 gid=500 euid=501 suid=501 fsuid=501 egid=500 sgid=500 fsgid=500 comm="realplay.bin" exe="/opt/nonfree.APPS/RealPlayer10/realplay.bin"
> type=AVC_PATH msg=audit(1143984222.150:293): path="/opt/nonfree.APPS/RealPlayer10/codecs/drvc.so"
> type=AVC msg=audit(1143984222.150:294): avc: denied { execmod } for pid=3834 comm="realplay.bin" name="vidsite.so" dev=hda2 ino=1141873 scontext=user_u:system_r:unconfined_t:s0 tcontext=user_u:object_r:usr_t:s0 tclass=file
> type=SYSCALL msg=audit(1143984222.150:294): arch=40000003 syscall=125 success=no exit=-13 a0=3fbb000 a1=4d000 a2=5 a3=bf8cb640 items=0 pid=3834 auid=501 uid=501 gid=500 euid=501 suid=501 fsuid=501 egid=500 sgid=500 fsgid=500 comm="realplay.bin" exe="/opt/nonfree.APPS/RealPlayer10/realplay.bin"
> type=AVC_PATH msg=audit(1143984222.150:294): path="/opt/nonfree.APPS/RealPlayer10/plugins/vidsite.so"
> type=AVC msg=audit(1143984224.070:295): avc: granted { execmem } for pid=3850 comm="realplay.bin" scontext=user_u:system_r:unconfined_t:s0 tcontext=user_u:system_r:unconfined_t:s0 tclass=process
> type=SYSCALL msg=audit(1143984224.070:295): arch=40000003 syscall=192 success=yes exit=16523264 a0=0 a1=a01000 a2=7 a3=22 items=0 pid=3850 auid=501 uid=501 gid=500 euid=501 suid=501 fsuid=501 egid=500 sgid=500 fsgid=500 comm="realplay.bin" exe="/opt/nonfree.APPS/RealPlayer10/realplay.bin"
> type=AVC msg=audit(1143984224.074:296): avc: granted { execmem } for pid=3850 comm="realplay.bin" scontext=user_u:system_r:unconfined_t:s0 tcontext=user_u:system_r:unconfined_t:s0 tclass=process
> type=SYSCALL msg=audit(1143984224.074:296): arch=40000003 syscall=192 success=yes exit=69705728 a0=0 a1=a01000 a2=7 a3=22 items=0 pid=3850 auid=501 uid=501 gid=500 euid=501 suid=501 fsuid=501 egid=500 sgid=500 fsgid=500 comm="realplay.bin" exe="/opt/nonfree.APPS/RealPlayer10/realplay.bin"
> type=AVC msg=audit(1143984224.074:297): avc: granted { execmem } for pid=3850 comm="realplay.bin" scontext=user_u:system_r:unconfined_t:s0 tcontext=user_u:system_r:unconfined_t:s0 tclass=process
> type=SYSCALL msg=audit(1143984224.074:297): arch=40000003 syscall=192 success=yes exit=27013120 a0=0 a1=a01000 a2=7 a3=22 items=0 pid=3850 auid=501 uid=501 gid=500 euid=501 suid=501 fsuid=501 egid=500 sgid=500 fsgid=500 comm="realplay.bin" exe="/opt/nonfree.APPS/RealPlayer10/realplay.bin"
> type=AVC msg=audit(1143984224.074:298): avc: granted { execmem } for pid=3855 comm="realplay.bin" scontext=user_u:system_r:unconfined_t:s0 tcontext=user_u:system_r:unconfined_t:s0 tclass=process
> type=SYSCALL msg=audit(1143984224.074:298): arch=40000003 syscall=192 success=yes exit=43130880 a0=0 a1=a01000 a2=7 a3=22 items=0 pid=3855 auid=501 uid=501 gid=500 euid=501 suid=501 fsuid=501 egid=500 sgid=500 fsgid=500 comm="realplay.bin" exe="/opt/nonfree.APPS/RealPlayer10/realplay.bin"
> type=AVC msg=audit(1143984224.078:299): avc: denied { execmod } for pid=3850 comm="realplay.bin" name="vidsite.so" dev=hda2 ino=1141873 scontext=user_u:system_r:unconfined_t:s0 tcontext=user_u:object_r:usr_t:s0 tclass=file
> type=SYSCALL msg=audit(1143984224.078:299): arch=40000003 syscall=125 success=no exit=-13 a0=294000 a1=4d000 a2=5 a3=bfec0dc0 items=0 pid=3850 auid=501 uid=501 gid=500 euid=501 suid=501 fsuid=501 egid=500 sgid=500 fsgid=500 comm="realplay.bin" exe="/opt/nonfree.APPS/RealPlayer10/realplay.bin"
> type=AVC_PATH msg=audit(1143984224.078:299): path="/opt/nonfree.APPS/RealPlayer10/plugins/vidsite.so"
> type=AVC msg=audit(1143984224.078:300): avc: denied { execmod } for pid=3850 comm="realplay.bin" name="vidsite.so" dev=hda2 ino=1141873 scontext=user_u:system_r:unconfined_t:s0 tcontext=user_u:object_r:usr_t:s0 tclass=file
> type=SYSCALL msg=audit(1143984224.078:300): arch=40000003 syscall=125 success=no exit=-13 a0=294000 a1=4d000 a2=5 a3=bfec0c20 items=0 pid=3850 auid=501 uid=501 gid=500 euid=501 suid=501 fsuid=501 egid=500 sgid=500 fsgid=500 comm="realplay.bin" exe="/opt/nonfree.APPS/RealPlayer10/realplay.bin"
> type=AVC_PATH msg=audit(1143984224.078:300): path="/opt/nonfree.APPS/RealPlayer10/plugins/vidsite.so"
> type=AVC msg=audit(1143984224.082:301): avc: denied { execmod } for pid=3850 comm="realplay.bin" name="oggfformat.so" dev=hda2 ino=1141883 scontext=user_u:system_r:unconfined_t:s0 tcontext=user_u:object_r:usr_t:s0 tclass=file
> type=SYSCALL msg=audit(1143984224.082:301): arch=40000003 syscall=125 success=no exit=-13 a0=e62000 a1=14000 a2=5 a3=bfec0c20 items=0 pid=3850 auid=501 uid=501 gid=500 euid=501 suid=501 fsuid=501 egid=500 sgid=500 fsgid=500 comm="realplay.bin" exe="/opt/nonfree.APPS/RealPlayer10/realplay.bin"
> type=AVC_PATH msg=audit(1143984224.082:301): path="/opt/nonfree.APPS/RealPlayer10/plugins/oggfformat.so"
> type=AVC msg=audit(1143984224.086:302): avc: denied { execmod } for pid=3850 comm="realplay.bin" name="vorbisrend.so" dev=hda2 ino=1141899 scontext=user_u:system_r:unconfined_t:s0 tcontext=user_u:object_r:usr_t:s0 tclass=file
> type=SYSCALL msg=audit(1143984224.086:302): arch=40000003 syscall=125 success=no exit=-13 a0=bb4000 a1=27000 a2=5 a3=bfec0c20 items=0 pid=3850 auid=501 uid=501 gid=500 euid=501 suid=501 fsuid=501 egid=500 sgid=500 fsgid=500 comm="realplay.bin" exe="/opt/nonfree.APPS/RealPlayer10/realplay.bin"
> type=AVC_PATH msg=audit(1143984224.086:302): path="/opt/nonfree.APPS/RealPlayer10/plugins/vorbisrend.so"
> type=AVC msg=audit(1143984224.086:303): avc: denied { execmod } for pid=3850 comm="realplay.bin" name="theorarend.so" dev=hda2 ino=1141909 scontext=user_u:system_r:unconfined_t:s0 tcontext=user_u:object_r:usr_t:s0 tclass=file
> type=SYSCALL msg=audit(1143984224.086:303): arch=40000003 syscall=125 success=no exit=-13 a0=e77000 a1=3d000 a2=5 a3=bfec0c20 items=0 pid=3850 auid=501 uid=501 gid=500 euid=501 suid=501 fsuid=501 egid=500 sgid=500 fsgid=500 comm="realplay.bin" exe="/opt/nonfree.APPS/RealPlayer10/realplay.bin"
> type=AVC_PATH msg=audit(1143984224.086:303): path="/opt/nonfree.APPS/RealPlayer10/plugins/theorarend.so"
> type=AVC msg=audit(1143984224.090:304): avc: denied { execmod } for pid=3850 comm="realplay.bin" name="swfrender.so" dev=hda2 ino=1141914 scontext=user_u:system_r:unconfined_t:s0 tcontext=user_u:object_r:usr_t:s0 tclass=file
> type=SYSCALL msg=audit(1143984224.090:304): arch=40000003 syscall=125 success=no exit=-13 a0=2772000 a1=85000 a2=5 a3=bfec0c20 items=0 pid=3850 auid=501 uid=501 gid=500 euid=501 suid=501 fsuid=501 egid=500 sgid=500 fsgid=500 comm="realplay.bin" exe="/opt/nonfree.APPS/RealPlayer10/realplay.bin"
> type=AVC_PATH msg=audit(1143984224.090:304): path="/opt/nonfree.APPS/RealPlayer10/plugins/swfrender.so"
> type=AVC msg=audit(1143984224.090:305): avc: denied { execmod } for pid=3850 comm="realplay.bin" name="vidsite.so" dev=hda2 ino=1141873 scontext=user_u:system_r:unconfined_t:s0 tcontext=user_u:object_r:usr_t:s0 tclass=file
> type=SYSCALL msg=audit(1143984224.090:305): arch=40000003 syscall=125 success=no exit=-13 a0=373b000 a1=4d000 a2=5 a3=bfec0ce0 items=0 pid=3850 auid=501 uid=501 gid=500 euid=501 suid=501 fsuid=501 egid=500 sgid=500 fsgid=500 comm="realplay.bin" exe="/opt/nonfree.APPS/RealPlayer10/realplay.bin"
> type=AVC_PATH msg=audit(1143984224.090:305): path="/opt/nonfree.APPS/RealPlayer10/plugins/vidsite.so"
> type=AVC msg=audit(1143984224.190:306): avc: granted { execmem } for pid=3851 comm="realplay.bin" scontext=user_u:system_r:unconfined_t:s0 tcontext=user_u:system_r:unconfined_t:s0 tclass=process
> type=SYSCALL msg=audit(1143984224.190:306): arch=40000003 syscall=192 success=yes exit=57606144 a0=0 a1=a01000 a2=7 a3=22 items=0 pid=3851 auid=501 uid=501 gid=500 euid=501 suid=501 fsuid=501 egid=500 sgid=500 fsgid=500 comm="realplay.bin" exe="/opt/nonfree.APPS/RealPlayer10/realplay.bin"
> type=AVC msg=audit(1143984224.194:307): avc: granted { execmem } for pid=3851 comm="realplay.bin" scontext=user_u:system_r:unconfined_t:s0 tcontext=user_u:system_r:unconfined_t:s0 tclass=process
> type=SYSCALL msg=audit(1143984224.194:307): arch=40000003 syscall=192 success=yes exit=98668544 a0=0 a1=a01000 a2=7 a3=22 items=0 pid=3851 auid=501 uid=501 gid=500 euid=501 suid=501 fsuid=501 egid=500 sgid=500 fsgid=500 comm="realplay.bin" exe="/opt/nonfree.APPS/RealPlayer10/realplay.bin"
> type=AVC msg=audit(1143984225.523:308): avc: denied { execmod } for pid=3850 comm="realplay.bin" name="drvc.so" dev=hda2 ino=1107020 scontext=user_u:system_r:unconfined_t:s0 tcontext=user_u:object_r:usr_t:s0 tclass=file
> type=SYSCALL msg=audit(1143984225.523:308): arch=40000003 syscall=125 success=no exit=-13 a0=23d4000 a1=4d000 a2=5 a3=bfec0da0 items=0 pid=3850 auid=501 uid=501 gid=500 euid=501 suid=501 fsuid=501 egid=500 sgid=500 fsgid=500 comm="realplay.bin" exe="/opt/nonfree.APPS/RealPlayer10/realplay.bin"
> type=AVC_PATH msg=audit(1143984225.523:308): path="/opt/nonfree.APPS/RealPlayer10/codecs/drvc.so"
> type=AVC msg=audit(1143984225.523:309): avc: denied { execmod } for pid=3850 comm="realplay.bin" name="vidsite.so" dev=hda2 ino=1141873 scontext=user_u:system_r:unconfined_t:s0 tcontext=user_u:object_r:usr_t:s0 tclass=file
> type=SYSCALL msg=audit(1143984225.523:309): arch=40000003 syscall=125 success=no exit=-13 a0=23d4000 a1=4d000 a2=5 a3=bfec0e10 items=0 pid=3850 auid=501 uid=501 gid=500 euid=501 suid=501 fsuid=501 egid=500 sgid=500 fsgid=500 comm="realplay.bin" exe="/opt/nonfree.APPS/RealPlayer10/realplay.bin"
> type=AVC_PATH msg=audit(1143984225.523:309): path="/opt/nonfree.APPS/RealPlayer10/plugins/vidsite.so"
>
>
> ------------------------------------------------------------------------
>
>
>
chcon -t textrel_shlib_t /opt/nonfree.APPS/RealPlayer10/plugins/*.so
More information about the fedora-list
mailing list