acroread needs one more file set to texrel...

Tom London selinux at gmail.com
Tue May 31 00:47:51 UTC 2005


Running targed/enforcing, latest rawhide.

Running acroread, if you select File->Document Properties, acroread
dies.  Here is the avc:
May 30 17:35:53 localhost kernel: audit(1117499753.135:6): avc: 
denied  { execmod } for  pid=5026 comm="acroread" name=ADMPlugin.apl
dev=dm-0 ino=2321999 scontext=user_u:system_r:unconfined_t
tcontext=system_u:object_r:usr_t tclass=file

Points to /usr/local/Adobe/Acrobat7.0/Reader/intellinux/SPPlugins/ADMPlugin.apl

Sigh... Does this seem like an appropriate fix?:
--- distros.fc  2005-05-20 11:54:57.000000000 -0700
+++ /tmp/distros.fc     2005-05-30 17:46:08.000000000 -0700
@@ -156,6 +156,7 @@
 /usr(/.*)?/Reader/intellinux/plug_ins/.*\.api  -- system_u:object_r:shlib_t
 /usr(/.*)?/Reader/intellinux/plug_ins/AcroForm\.api    --
system_u:object_r:texrel_shlib_t
 /usr(/.*)?/Reader/intellinux/plug_ins/EScript\.api     --
system_u:object_r:texrel_shlib_t
+/usr(/.*)?/Reader/intellinux/SPPlugins/ADMPlugin\.apl  --
system_u:object_r:texrel_shlib_t

 ')

tom
-- 
Tom London




More information about the fedora-selinux-list mailing list