realplayer
Tom London
selinux at gmail.com
Fri Oct 22 16:13:03 UTC 2004
Running rawhide, strict/enforcing.
After installing the RealPlayer 10 rpm (installs mostly into /usr/local/....),
have no problem running realplayer in permissive mode.
It did through off the 'ld.so.cache' avc:
Oct 18 06:55:58 fedora kernel: audit(1098107758.752:0): avc: denied
{ execute } for pid=3956 path=/etc/ld.so.cache dev=hda2 ino=4474151
scontext=user_u:user_r:user_t tcontext=system_u:object_r:ld_so_cache_t
tclass=file
I was not surprised, since the files were not properly labeled.
Using the labels from HelixPlayer as a guide, I relabled RealPlayer's
installed files (mostly changing .so -> shlib_t, etc.)
This fixed the 'ld.so.cache' avc, but now I'm stumped with the following:
Oct 22 08:58:36 fedora kernel: audit(1098460716.425:0): avc: denied
{ execute } for pid=19845 path=/usr/lib/locale/locale-archive
dev=hda2 ino=4117048 scontext=user_u:user_r:user_t
tcontext=system_u:object_r:locale_t tclass=file
Oct 22 08:58:36 fedora kernel: audit(1098460716.426:0): avc: denied
{ execute } for pid=19845
path=/usr/lib/locale/en_US.utf8/LC_IDENTIFICATION dev=hda2 ino=4444372
scontext=user_u:user_r:user_t tcontext=system_u:object_r:locale_t
tclass=file
Execute for locale files????
I tried 'strace ./realplay.bin' and got:
<<<<<SNIP>>>>>
munmap(0xe5d000, 135566) = 0
set_tid_address(0xc5c928) = 19906
rt_sigaction(SIGRTMIN, {0x2c23a0, [], SA_RESTORER|SA_SIGINFO,
0x2c98a0}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {0x2c2410, [],
SA_RESTORER|SA_RESTART|SA_SIGINFO, 0x2c98a0}, NULL, 8) = 0
rt_sigprocmask(SIG_UNBLOCK, [RTMIN], NULL, 8) = 0
getrlimit(RLIMIT_STACK, {rlim_cur=10240*1024, rlim_max=RLIM_INFINITY}) = 0
_sysctl({{CTL_KERN, KERN_VERSION}, 2, 0xfefff5a8, 31, (nil), 0}) = 0
brk(0) = 0x80d5000
brk(0x80f6000) = 0x80f6000
open("/usr/lib/locale/locale-archive", O_RDONLY|O_LARGEFILE) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=38674048, ...}) = 0
mmap2(NULL, 2097152, PROT_READ, MAP_PRIVATE, 3, 0) = -1 EACCES
(Permission denied)
close(3) = 0
open("/usr/share/locale/locale.alias", O_RDONLY) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=2528, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0xe36000
read(3, "# Locale name alias data base.\n#"..., 4096) = 2528
read(3, "", 4096) = 0
close(3) = 0
munmap(0xe36000, 4096) = 0
open("/usr/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", O_RDONLY) = -1
ENOENT (No such file or directory)
open("/usr/lib/locale/en_US.utf8/LC_IDENTIFICATION", O_RDONLY) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=365, ...}) = 0
mmap2(NULL, 365, PROT_READ, MAP_PRIVATE, 3, 0) = -1 EACCES (Permission denied)
close(3) = 0
--- SIGSEGV (Segmentation fault) @ 0 (0) ---
+++ killed by SIGSEGV +++
Is this related to the previously reported (and fixed, I thought)
mmap() problem? Something else?
thanks,
tom
--
Tom London
More information about the fedora-selinux-list
mailing list