IcedTea Firefox and SELinux
Daniel J Walsh
dwalsh at redhat.com
Tue Dec 2 21:00:17 UTC 2008
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
insidepowe wrote:
> I have the java applet not initialized problem also and have solved it.
>
> I think there is a conflict between jre java-plugin and IcedTea plugin. so I removed IcedTea and java applet is now working.
>
> 1. Download jre-6u1-linux-i586.bin
> 2. su-->pwd-->mv jre-6u1-linux-i586.bin to /usr/local
> 3. chmod a+x jre-6u1-linux-i586.bin
> 4. verify permissions: ls -l
> 5. ./jre-6u1-linux-i586.bin
> 6. Do you agree? Yes.-->Done
> 7. It's installed under: /usr/local/jre1.6.0_01
> 8. cd ../lib/firefox-1.5.0.10/plugins/
> 9. ln -s
> /usr/local/jre1.6.0_01/plugin/i386/ns7/libjavaplugin_oji.so
> 10.Edit > Preferences. Under Advanced category >
> Select Enable Java
>
> --delete ICedTea plugin (having conflict with Java Plugin)
>
> I got this help from a forum but forget the source.
>
> p/s: use about :plugins to check what plugin has been loaded in firefox
>
> hope this help :-)
>
>
If you update to the latest selinux-policy and run restorecon -R -v
/home it should fix the labeling on the .icedteaplugin
which is causing selinux problems. These problems are being caused by
the defaulting of allow_unconfined_nsplugin_transition to on.
This is confining the nsplugin to a limited number of directories in
your homedir. If you do not want nsplugin confined, you can turn off
the boolean by executing
# setsebool -P allow_unconfined_nsplugin_transition 0
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org
iEYEARECAAYFAkk1oeEACgkQrlYvE4MpobNnfgCfVCuNX52TvBN9SK3lDu9EYqPv
GM0AnjrFgv1AyQ/6FmwoUMCb99j39du7
=vlXJ
-----END PGP SIGNATURE-----
More information about the fedora-list
mailing list