SELinux is preventing plugin-config from making the program stack executable/seamonkey

Daniel J Walsh dwalsh at redhat.com
Tue Feb 26 18:43:12 UTC 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Antonio Olivares wrote:
> --- Will Woods <wwoods at redhat.com> wrote:
> 
>> On Feb 26, 2008, at 8:29 AM, Antonio Olivares wrote:
>>
>>> Dear all,
>>>
>>> I have changed the stack to allow firefox to use
>> the
>>> stack, then I reverted.  I read Jim's exchange
>> with
>>> Mr. Dan Walsh and there it was mentioned about
>>> nspluginwrapper.  I installed it and I see the
>>> following every time I start firefox/seamonkey.
>> The execstack message is almost certainly because of
>> a plugin you have  
>> installed - I've never seen this on any machine
>> unless I've installed  
>> some (3rd-party, binary) plugins.
>>
>> What plugins have you installed?
>>
>> -w
>>
>> -- 
>> fedora-test-list mailing list
>> fedora-test-list at redhat.com
>> To unsubscribe: 
>>
> https://www.redhat.com/mailman/listinfo/fedora-test-list
> 
> flash-plugin
> 
> only
> 
> Installed plug-ins
> Find more information about browser plug-ins at
> mozilla.org.
> Help for installing plug-ins is available from
> plugindoc.mozdev.org.
> Shockwave Flash
> 
>     File name: nswrapper_32_32.libflashplayer.so
>     Shockwave Flash 9.0 r115
> 
> MIME Type 	Description 	Suffixes 	Enabled
> application/x-shockwave-flash 	Shockwave Flash 	swf 
> Yes
> application/futuresplash 	FutureSplash Player 	spl 
> Yes
> iTunes Application Detector
> 
>     File name:
> nswrapper_32_32.librhythmbox-itms-detection-plugin.so
>     This plug-in detects the presence of iTunes when
> opening iTunes Store URLs in a web page with Firefox.
> 
> MIME Type 	Description 	Suffixes 	Enabled
> application/itunes-plugin 			Yes
> NPAPI Plugins Wrapper 0.9.91.5
> 
>     File name: npwrapper.so
>     nspluginwrapper is a cross-platform NPAPI plugin
> viewer, in particular for linux/i386 plugins.
>     This is beta software available under the terms of
> the GNU General Public License.
> 
> MIME Type 	Description 	Suffixes 	Enabled
> unknown/mime-type 	Do not open 	none 	Yes
> GCJ Web Browser Plugin (using IcedTea) 1.5
> 
>     File name: gcjwebplugin.so
>     The GCJ Web Browser Plugin (using IcedTea)
> executes Java applets.
> 
> MIME Type 	Description 	Suffixes 	Enabled
> application/x-java-vm 	IcedTea 	class,jar 	Yes
> application/x-java-applet 	IcedTea 	class,jar 	Yes
> application/x-java-applet;version=1.1 	IcedTea 
> class,jar 	Yes
> application/x-java-applet;version=1.1.1 	IcedTea 
> class,jar 	Yes
> application/x-java-applet;version=1.1.2 	IcedTea 
> class,jar 	Yes
> application/x-java-applet;version=1.1.3 	IcedTea 
> class,jar 	Yes
> application/x-java-applet;version=1.2 	IcedTea 
> class,jar 	Yes
> application/x-java-applet;version=1.2.1 	IcedTea 
> class,jar 	Yes
> application/x-java-applet;version=1.2.2 	IcedTea 
> class,jar 	Yes
> application/x-java-applet;version=1.3 	IcedTea 
> class,jar 	Yes
> application/x-java-applet;version=1.3.1 	IcedTea 
> class,jar 	Yes
> application/x-java-applet;version=1.4 	IcedTea 
> class,jar 	Yes
> application/x-java-applet;version=1.4.1 	IcedTea 
> class,jar 	Yes
> application/x-java-applet;version=1.4.2 	IcedTea 
> class,jar 	Yes
> application/x-java-applet;version=1.5 	IcedTea 
> class,jar 	Yes
> application/x-java-applet;version=1.6 	IcedTea 
> class,jar 	Yes
> application/x-java-applet;version=1.7 	IcedTea 
> class,jar 	Yes
> application/x-java-applet;jpi-version=1.7.0_00 
> IcedTea 	class,jar 	Yes
> application/x-java-bean 	IcedTea 	class,jar 	Yes
> application/x-java-bean;version=1.1 	IcedTea 
> class,jar 	Yes
> application/x-java-bean;version=1.1.1 	IcedTea 
> class,jar 	Yes
> application/x-java-bean;version=1.1.2 	IcedTea 
> class,jar 	Yes
> application/x-java-bean;version=1.1.3 	IcedTea 
> class,jar 	Yes
> application/x-java-bean;version=1.2 	IcedTea 
> class,jar 	Yes
> application/x-java-bean;version=1.2.1 	IcedTea 
> class,jar 	Yes
> application/x-java-bean;version=1.2.2 	IcedTea 
> class,jar 	Yes
> application/x-java-bean;version=1.3 	IcedTea 
> class,jar 	Yes
> application/x-java-bean;version=1.3.1 	IcedTea 
> class,jar 	Yes
> application/x-java-bean;version=1.4 	IcedTea 
> class,jar 	Yes
> application/x-java-bean;version=1.4.1 	IcedTea 
> class,jar 	Yes
> application/x-java-bean;version=1.4.2 	IcedTea 
> class,jar 	Yes
> application/x-java-bean;version=1.5 	IcedTea 
> class,jar 	Yes
> application/x-java-bean;version=1.6 	IcedTea 
> class,jar 	Yes
> application/x-java-bean;version=1.7 	IcedTea 
> class,jar 	Yes
> application/x-java-bean;jpi-version=1.7.0_00 	IcedTea 
> class,jar 	Yes
> 
> 
> Thanks,
> 
> Antonio
> 
> 
>       ____________________________________________________________________________________
> Looking for last minute shopping deals?  
> Find them fast with Yahoo! Search.  http://tools.search.yahoo.com/newsearch/category.php?category=shopping
> 
For some reason I lost the original email. But was nsplugin transition
happing?

 getsebool -a | grep nsp
allow_nsplugin_execmem --> on
allow_unconfined_nsplugin_transition --> on


You might want to turn both of these on, and see if it works for you.
You need to restart the browser.


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkfEXcAACgkQrlYvE4MpobNndACcDR7EAP+KQQ02Wq3e0UzfNh7O
1hoAoLa9OEQwIwPKBy/V2XUwCDtMWJM5
=WJfR
-----END PGP SIGNATURE-----




More information about the fedora-test-list mailing list