Fedora 10 Selinux Denies Firefox Ability to Upload Picture

Daniel J Walsh dwalsh at redhat.com
Tue Jan 20 16:06:30 UTC 2009


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Serge E. Hallyn wrote:
> Quoting Ole Ersoy (ole.ersoy at gmail.com):
>>> Are you running with nsplugin_t?  ps -eZ | grep nsplugin
>> [root at ole Download]# ps -eZ | grep nsplugin
>> [root at ole Download]# 
>>
>>> What file system are you using?
>> ext3
>>
>>> What is the exact behaviour that is being blocked?
>> I tried uploading a photo to facebook, and kept getting a "one
>> sentence" postback from facebook saying the image could not be
> 
> Interesting.
> 
> Another thing to consider is that facebook (or someone else)
> might have been trying to do something other than get that
> picture, and selinux rightfully stopped it.
> 
>> uploaded.  I tried it 3-4 times, just to make sure it was not a
>> temporary thing on their side.  Then I ran setenforce 0, and the image
>> uploaded fine.  So I assumed selinux was blocking firefox from reading
>> the image.  I've been trying to duplicate the result with SELinux
>> enforcing though, after rebooting, and now I can upload images without
>> a problem, so I'm wondering whether it was just a coincidence that
>> setenforce 0 worked.  If no one else has the problem, then it's
>> probably just a coincidence.  I have a better idea on how to isolate
>> the message in the log now, so if it happens again, I'll hopefully be
>> able to get a better grasp on why.
>>
>> Thanks,
>> - Ole
>>
>> --
>> fedora-selinux-list mailing list
>> fedora-selinux-list at redhat.com
>> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
Ok, if it happens again, don't hesitate to ping me.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkl19oUACgkQrlYvE4MpobMqtQCfcMLys63o2TBh5ITnHFlE0WC3
Fr4AniDElQN84WBH9W2MZWH9fxguDPfS
=LlkN
-----END PGP SIGNATURE-----




More information about the fedora-selinux-list mailing list