f7 : googleearth selinux avc denial

Skunk Worx skunkworx at verizon.net
Sat Jun 16 06:59:46 UTC 2007


I know it's not a RH product still potentially interesting for other users.

Google Earth
4.1.7076.4458 (beta)
Build Date
May 6 2007
Build Time
11:10:05
Renderer
OpenGL
Operating System
Linux (2.6.21.3228)
Video Driver
ATI Technologies Inc.
Max Texture Size
2048x2048
Server
kh.google.com
User

License Key

I've posted it to their NG.

The /opt/google-earth/googleearth-bin application attempted to change 
the access protection of memory on the heap (e,g., allocated using 
malloc). This is a potential security problem. Applications should not 
be doing this. Applications are sometimes coded incorrectly and request 
this permission. The SELinux Memory Protection Tests web page explains 
how to remove this requirement. If /opt/google-earth/googleearth-bin 
does not work and you need it to work, you can configure SELinux 
temporarily to allow this access until the application is fixed. Please 
file a bug report against this package.

avc: denied { execheap } for comm="googleearth-bin" egid=500 euid=500 
exe="/opt/google-earth/googleearth-bin" exit=0 fsgid=500 fsuid=500 
gid=500 items=0 pid=3473 scontext=user_u:system_r:unconfined_t:s0 
sgid=500 subj=user_u:system_r:unconfined_t:s0 suid=500 tclass=process 
tcontext=user_u:system_r:unconfined_t:s0 tty=pts1 uid=500




More information about the fedora-list mailing list