error in today's rawhide update....

[Daniel J Walsh]

Tom London wrote:
> On 4/12/06, Tom London <selinux at gmail.com> wrote:
>   
>> I did 'setenforce 0', and 'rpm -Uvh selinux-policy-targeted*', and
>> this seems to be proceeding without errors.
>>
>> I'm getting lots of files relabeled (>400), mostly texrel_shlib_t to
>> lib_t, for things like /usr/lib/firefox, /usr/lib/mozilla,
>> /usr/lib/wine.
>>
>> This expected?
>>     
>
> Hmmm...Suspect relabeling has broken some stuff.  Get this when I try
> to start firefox:
> type=AVC msg=audit(1144853278.073:58): avc:  denied  { execmod } for 
> pid=4819 comm="firefox-bin" name="libxpcom_core.so" dev=dm-0
> ino=6114892 scontext=user_u:system_r:unconfined_t:s0
> tcontext=system_u:object_r:lib_t:s0 tclass=file
> type=SYSCALL msg=audit(1144853278.073:58): arch=40000003 syscall=125
> success=yes exit=0 a0=327000 a1=cc000 a2=5 a3=bfc5e610 items=0
> pid=4819 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500
> sgid=500 fsgid=500 tty=(none) comm="firefox-bin"
> exe="/usr/lib/firefox-1.5.0.1/firefox-bin"
> subj=user_u:system_r:unconfined_t:s0
> type=AVC_PATH msg=audit(1144853278.073:58): 
> path="/usr/lib/firefox-1.5.0.1/libxpcom_core.so"
>
> I'll reboot in permissive mode and try to capture all the AVCs....
>   
Yes labeling has been screwed up.  SHould be fixed in last nights rawhide.
> tom
> --
> Tom London
>
> --
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
>