Mozilla needs to create lock (link) file

Tom London selinux at
Sat Sep 24 18:30:11 UTC 2005

Running strict enforcing, latest rawhide.

Mozilla wants to create a lock/link file:
type=AVC msg=audit(1127586026.834:4165): avc:  denied  { create } for 
pid=3407 comm="firefox-bin" name="lock"
tcontext=tbl:object_r:staff_untrusted_content_t:s0 tclass=lnk_file
type=SYSCALL msg=audit(1127586026.834:4165): arch=40000003 syscall=83
success=yes exit=0 a0=9d800d0 a1=9d7fd68 a2=8067d00 a3=0 items=2
pid=3407 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500
egid=500 sgid=500 fsgid=500 comm="firefox-bin"
type=CWD msg=audit(1127586026.834:4165):  cwd="/home/tbl"
type=PATH msg=audit(1127586026.834:4165): item=0
name="" flags=101
type=PATH msg=audit(1127586026.834:4165): item=1
name="/home/tbl/.mozilla/firefox/yz68q13i.default/lock" flags=10 
inode=2786580 dev=03:02 mode=040700 ouid=500 ogid=500 rdev=00:00

allow staff_mozilla_t staff_untrusted_content_t:lnk_file create;

Not sure which macro needs to be fiddled.....

Tom London

More information about the fedora-selinux-list mailing list