SELinux is preventing plugin-config from making the program stack executable/seamonkey

Daniel J Walsh dwalsh at redhat.com
Tue Feb 26 20:32:27 UTC 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Antonio Olivares wrote:
> --- Daniel J Walsh <dwalsh at redhat.com> wrote:
> 
> Antonio Olivares wrote:
>>>> --- Will Woods <wwoods at redhat.com> wrote:
>>>>
>>>>> On Feb 26, 2008, at 8:29 AM, Antonio Olivares
> wrote:
>>>>>> Dear all,
>>>>>>
>>>>>> I have changed the stack to allow firefox to use
>>>>> the
>>>>>> stack, then I reverted.  I read Jim's exchange
>>>>> with
>>>>>> Mr. Dan Walsh and there it was mentioned about
>>>>>> nspluginwrapper.  I installed it and I see the
>>>>>> following every time I start firefox/seamonkey.
>>>>> The execstack message is almost certainly because
> of
>>>>> a plugin you have  
>>>>> installed - I've never seen this on any machine
>>>>> unless I've installed  
>>>>> some (3rd-party, binary) plugins.
>>>>>
>>>>> What plugins have you installed?
>>>>>
>>>>> -w
>>>>>
>>>>> -- 
>>>>> fedora-test-list mailing list
>>>>> fedora-test-list at redhat.com
>>>>> To unsubscribe: 
>>>>>
>> https://www.redhat.com/mailman/listinfo/fedora-test-list
>>>> flash-plugin
>>>>
>>>> only
>>>>
>>>> Installed plug-ins
>>>> Find more information about browser plug-ins at
>>>> mozilla.org.
>>>> Help for installing plug-ins is available from
>>>> plugindoc.mozdev.org.
>>>> Shockwave Flash
>>>>
>>>>     File name: nswrapper_32_32.libflashplayer.so
>>>>     Shockwave Flash 9.0 r115
>>>>
>>>> MIME Type 	Description 	Suffixes 	Enabled
>>>> application/x-shockwave-flash 	Shockwave Flash 
> swf 
>>>> Yes
>>>> application/futuresplash 	FutureSplash Player 	spl
>>>> Yes
>>>> iTunes Application Detector
>>>>
>>>>     File name:
>>>>
>> nswrapper_32_32.librhythmbox-itms-detection-plugin.so
>>>>     This plug-in detects the presence of iTunes
> when
>>>> opening iTunes Store URLs in a web page with
> Firefox.
>>>> MIME Type 	Description 	Suffixes 	Enabled
>>>> application/itunes-plugin 			Yes
>>>> NPAPI Plugins Wrapper 0.9.91.5
>>>>
>>>>     File name: npwrapper.so
>>>>     nspluginwrapper is a cross-platform NPAPI
> plugin
>>>> viewer, in particular for linux/i386 plugins.
>>>>     This is beta software available under the
> terms of
>>>> the GNU General Public License.
>>>>
>>>> MIME Type 	Description 	Suffixes 	Enabled
>>>> unknown/mime-type 	Do not open 	none 	Yes
>>>> GCJ Web Browser Plugin (using IcedTea) 1.5
>>>>
>>>>     File name: gcjwebplugin.so
>>>>     The GCJ Web Browser Plugin (using IcedTea)
>>>> executes Java applets.
>>>>
>>>> MIME Type 	Description 	Suffixes 	Enabled
>>>> application/x-java-vm 	IcedTea 	class,jar 	Yes
>>>> application/x-java-applet 	IcedTea 	class,jar 	Yes
>>>> application/x-java-applet;version=1.1 	IcedTea 
>>>> class,jar 	Yes
>>>> application/x-java-applet;version=1.1.1 	IcedTea 
>>>> class,jar 	Yes
>>>> application/x-java-applet;version=1.1.2 	IcedTea 
>>>> class,jar 	Yes
>>>> application/x-java-applet;version=1.1.3 	IcedTea 
>>>> class,jar 	Yes
>>>> application/x-java-applet;version=1.2 	IcedTea 
>>>> class,jar 	Yes
>>>> application/x-java-applet;version=1.2.1 	IcedTea 
>>>> class,jar 	Yes
>>>> application/x-java-applet;version=1.2.2 	IcedTea 
>>>> class,jar 	Yes
>>>> application/x-java-applet;version=1.3 	IcedTea 
>>>> class,jar 	Yes
>>>> application/x-java-applet;version=1.3.1 	IcedTea 
>>>> class,jar 	Yes
>>>> application/x-java-applet;version=1.4 	IcedTea 
>>>> class,jar 	Yes
>>>> application/x-java-applet;version=1.4.1 	IcedTea 
>>>> class,jar 	Yes
>>>> application/x-java-applet;version=1.4.2 	IcedTea 
>>>> class,jar 	Yes
>>>> application/x-java-applet;version=1.5 	IcedTea 
>>>> class,jar 	Yes
>>>> application/x-java-applet;version=1.6 	IcedTea 
>>>> class,jar 	Yes
>>>> application/x-java-applet;version=1.7 	IcedTea 
>>>> class,jar 	Yes
>>>> application/x-java-applet;jpi-version=1.7.0_00 
>>>> IcedTea 	class,jar 	Yes
>>>> application/x-java-bean 	IcedTea 	class,jar 	Yes
>>>> application/x-java-bean;version=1.1 	IcedTea 
>>>> class,jar 	Yes
>>>> application/x-java-bean;version=1.1.1 	IcedTea 
>>>> class,jar 	Yes
>>>> application/x-java-bean;version=1.1.2 	IcedTea 
>>>> class,jar 	Yes
>>>> application/x-java-bean;version=1.1.3 	IcedTea 
>>>> class,jar 	Yes
>>>> application/x-java-bean;version=1.2 	IcedTea 
>>>> class,jar 	Yes
>>>> application/x-java-bean;version=1.2.1 	IcedTea 
>>>> class,jar 	Yes
>>>> application/x-java-bean;version=1.2.2 	IcedTea 
>>>> class,jar 	Yes
>>>> application/x-java-bean;version=1.3 	IcedTea 
>>>> class,jar 	Yes
>>>> application/x-java-bean;version=1.3.1 	IcedTea 
>>>> class,jar 	Yes
>>>> application/x-java-bean;version=1.4 	IcedTea 
>>>> class,jar 	Yes
>>>> application/x-java-bean;version=1.4.1 	IcedTea 
>>>> class,jar 	Yes
>>>> application/x-java-bean;version=1.4.2 	IcedTea 
>>>> class,jar 	Yes
>>>> application/x-java-bean;version=1.5 	IcedTea 
>>>> class,jar 	Yes
>>>> application/x-java-bean;version=1.6 	IcedTea 
>>>> class,jar 	Yes
>>>> application/x-java-bean;version=1.7 	IcedTea 
>>>> class,jar 	Yes
>>>> application/x-java-bean;jpi-version=1.7.0_00 
> IcedTea 
>>>> class,jar 	Yes
>>>>
>>>>
>>>> Thanks,
>>>>
>>>> Antonio
>>>>
>>>>
>>>>      
>> ____________________________________________________________________________________
>>>> Looking for last minute shopping deals?  
>>>> Find them fast with Yahoo! Search. 
>> http://tools.search.yahoo.com/newsearch/category.php?category=shopping
> For some reason I lost the original email. But was
> nsplugin transition
> happing?
> 
>  getsebool -a | grep nsp
> allow_nsplugin_execmem --> on
> allow_unconfined_nsplugin_transition --> on
> 
> 
> You might want to turn both of these on, and see if
> it works for you.
> You need to restart the browser.
> 
> 
>>
- --

> How do I turn these on?

> [olivares at localhost ~]$ su -
> Password: 
> [root at localhost ~]# getsebool -a | grep nsp
> allow_nsplugin_execmem --> off
> allow_unconfined_nsplugin_transition --> off
> [root at localhost ~]# allow_nsplugin_execmem --> on
> -bash: allow_nsplugin_execmem: command not found
> [root at localhost ~]#
> allow_unconfined_nsplugin_transition --> on
> -bash: allow_unconfined_nsplugin_transition: command
> not found
> [root at localhost ~]# 

> Thanks,

> Antonio

setsebool -P allow_unconfined_nsplugin_transition=1 allow_nsplugin_execmem=1


>       ____________________________________________________________________________________
> Looking for last minute shopping deals?  
> Find them fast with Yahoo! Search.  http://tools.search.yahoo.com/newsearch/category.php?category=shopping


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkfEd1sACgkQrlYvE4MpobPdpQCeMPYwDZZ0JkcRro3inel7qk+G
ec4AoLG+tui9dSuX+JE8TCvyEchVBLEf
=+XKe
-----END PGP SIGNATURE-----




More information about the fedora-test-list mailing list