Opening Mugshot Stacker

[Aravind Seshadri]

I have Mugshot 1.1.49 installed in Fedora 7 on my laptop. My preferred
browser is Firefox (current version is 2.0.0.8). Whenever I click on a
link in Mugshot Stacker I get the following SELinux denial message.

**********************************************************************
Summary
SELinux is preventing /usr/lib/firefox-2.0.0.8/firefox-bin from
loading /usr/lib/mozilla/plugins/nppdf.so which requires text
relocation.

Detailed Description
The /usr/lib/firefox-2.0.0.8/firefox-bin application attempted to load
/usr/lib/mozilla/plugins/nppdf.so which requires text relocation. This
is a potential security problem. Most libraries do not need this
permission. Libraries are sometimes coded incorrectly and request this
permission. The http://people.redhat.com/drepper/selinux-mem.html web
page explains how to remove this requirement.  You can configure SELinux
temporarily to allow /usr/lib/mozilla/plugins/nppdf.so to use relocation
as a workaround, until the library is fixed. Please file a
http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package.

Additional Information        

Source Context                user_u:system_r:unconfined_t
Target Context                system_u:object_r:lib_t
Target Objects                /usr/lib/mozilla/plugins/nppdf.so [ file ]
Affected RPM Packages         firefox-2.0.0.8-1.fc7 [application]
Policy RPM                    selinux-policy-2.6.4-48.fc7
Selinux Enabled               True
Policy Type                   targeted
MLS Enabled                   True
Enforcing Mode                Enforcing
Plugin Name                   plugins.allow_execmod
Host Name                     xxxx.xxxx.xxxx.xxx
Platform                      Linux xxxx.xxxx.xxxx.xxx
                              2.6.22.9-91.fc7 #1 SMP Thu Sep 27 23:10:59
EDT
                              2007 i686 i686
Alert Count                   18
First Seen                    Sun 23 Sep 2007 04:03:01 PM CDT
Last Seen                     Thu 25 Oct 2007 11:43:58 AM CDT
Local ID                      cde796e0-2c91-46d1-aaff-f79d3a6a91f3
Line Numbers                  

Raw Audit Messages            

avc: denied { execmod } for comm="firefox-bin" dev=dm-0 egid=500
euid=500 exe="/usr/lib/firefox-2.0.0.8/firefox-bin" exit=-13 fsgid=500
fsuid=500 gid=500 items=0 name="nppdf.so"
path="/usr/lib/mozilla/plugins/nppdf.so" pid=4818
scontext=user_u:system_r:unconfined_t:s0 sgid=500
subj=user_u:system_r:unconfined_t:s0 suid=500 tclass=file
tcontext=system_u:object_r:lib_t:s0 tty=(none) uid=500

************************************************************************

Is this a known bug? I have seen it other versions of Mugshot as well as
Firefox.

-- 
Best Regards,
Aravind 
http://www.aravind.name
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 481 bytes
Desc: This is a digitally signed message part
URL: <http://listman.redhat.com/archives/fedora-test-list/attachments/20071025/db05d5f5/attachment.sig>