firefox and selinux

[Andrew Farris]

Antonio Olivares wrote:
> Dear all,
> 
> I have set settroubleshoot to allow the following:
> chcon -t unconfined_execmem_exec_t
> '/usr/lib/firefox-3.0b4pre/firefox'
> 
> But it is happening again, I do not understand why I
> need to do it multiple of times.  I see a pattern
> occuring:  I have filed a bug report against
> firefox-b3

And btw, you probably needed to do it again because your filesystem got 
relabeled, so the chcon was undone by the policy, and should have been.  To make 
a change that would not get reset by relabeling you need to change policy, or at 
least create your own little policy module.

-- 
Andrew Farris <lordmorgul at gmail.com> www.lordmorgul.net
  gpg 0xC99B1DF3 fingerprint CDEC 6FAD BA27 40DF 707E A2E0 F0F6 E622 C99B 1DF3
No one now has, and no one will ever again get, the big picture. - Daniel Geer
----                                                                       ----