FC5, selinux and acroread

Vikram Goyal vikigoyal at gmail.com
Sun Apr 23 10:39:33 UTC 2006


On Sun, Apr 23, 2006 at 06:27:46AM -0400, Gene Heskett wrote:
> Greetings;
> 
> Let me phrase this differently this time.
> 
> Selinux is, when in the enforcing mode, denying acrobat to run, 
> returning this error:
> 
> Apr 23 05:11:10 diablo kernel: audit(1145783470.557:3): avc:  denied  
> { execmod } for  pid=2354 comm="acroread" name="libJP2K.so" dev=hda5 
> ino=9886986 scontext=root:system_r:unconfined_t:s0-s0:c0.c255 
> tcontext=system_u:object_r:lib_t:s0 tclass=file
> Apr 23 05:12:02 diablo kernel: audit(1145783522.332:4): avc:  denied  
> { execmod } for  pid=2391 comm="firefox-bin" name="nppdf.so" dev=hda5 
> ino=9821380 scontext=root:system_r:unconfined_t:s0-s0:c0.c255 
> tcontext=root:object_r:lib_t:s0 tclass=file
> 
> However, set it for permissive & reboot, and all is happy.
> 
> So how do we go about clearing acrobats ability to run with selinux when 
> it is in the enforcing mode?
> 

Excerpt from the list itself. Forgot which thread though:
---------------------------------------------------------------------
>
> That's it, SELinux is behind the problem. Only I like to keep SELinux
> enforcing-mode activ and at the same time I need AdobeReader. Anything
to solve
> that conflict?

Hi, I have done 2 things to fix it:

 $ chcon -t
textrel_shlib_t /usr/local/Adobe/Acrobat7.0/Reader/intellinux/lib/*.so

and then

$ chcon -t
textrel_shlib_t
/usr/local/Adobe/Acrobat7.0/Reader/intellinux/plug_ins/*.api

That fixed the problem for me.

Reinhard

>
> Bengt
>
---------------------------------------------------------------------

HTH!
-- 
vikram...
         ||||||||
         ||||||||
^^'''''^^||root||^^^'''''''^^
        // \\   ))
       //(( \\// \\
      // /\\ ||   \\
     || / )) ((    \\
-- 
I'm continually AMAZED at th'breathtaking effects of WIND EROSION!!
-- 
 #
~|~
 =
Registered Linux User #285795




More information about the fedora-list mailing list