SELinux is preventing plugin-config (nsplugin_config_t) "execstack" to <Unknown> (nsplugin_config_t)
Antonio Olivares
olivares14031 at yahoo.com
Wed Feb 27 19:45:44 UTC 2008
--- Daniel J Walsh <dwalsh at redhat.com> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Antonio Olivares wrote:
> > Ok Seamonkey and selinux, firefox, and nsplugin.
> >
> > Here are the results. Thanks for your suggestions
> and
> > advice in advance.
> >
> > Antonio
> >
> >
> >
> > Summary:
> >
> > SELinux is preventing plugin-config
> > (nsplugin_config_t) "execstack" to <Unknown>
> > (nsplugin_config_t).
> >
> > Detailed Description:
> >
> > SELinux denied access requested by plugin-config.
> It
> > is not expected that this
> > access is required by plugin-config and this
> access
> > may signal an intrusion
> > attempt. It is also possible that the specific
> version
> > or configuration of the
> > application is causing it to require additional
> > access.
> >
> > Allowing Access:
> >
> > You can generate a local policy module to allow
> this
> > access - see FAQ
> >
>
(http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385)
> > Or you can disable
> > SELinux protection altogether. Disabling SELinux
> > protection is not recommended.
> > Please file a bug report
> >
> (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi)
> > against this package.
> >
> > Additional Information:
> >
> > Source Context
> > unconfined_u:unconfined_r:nsplugin_config_t
> >
> :SystemLow-SystemHigh
> > Target Context
> > unconfined_u:unconfined_r:nsplugin_config_t
> >
> :SystemLow-SystemHigh
> > Target Objects None [ process ]
> > Source plugin-config
> > Source Path
> > /usr/lib/nspluginwrapper/plugin-config
> > Port <Unknown>
> > Host localhost
> > Source RPM Packages
> > nspluginwrapper-0.9.91.5-22.fc9
> > Target RPM Packages
> > Policy RPM
> > selinux-policy-3.3.0-1.fc9
> > Selinux Enabled True
> > Policy Type targeted
> > MLS Enabled True
> > Enforcing Mode Enforcing
> > Plugin Name catchall
> > Host Name localhost
> > Platform Linux localhost
> > 2.6.25-0.65.rc2.git7.fc9 #1 SMP
> > Sat Feb 23 23:06:09
> EST
> > 2008 i686 athlon
> > Alert Count 2
> > First Seen Tue 26 Feb 2008
> 03:17:23
> > PM CST
> > Last Seen Tue 26 Feb 2008
> 03:22:56
> > PM CST
> > Local ID
> > 276820c9-9871-4632-8ec1-c8909c8d7c0b
> > Line Numbers
> >
> > Raw Audit Messages
> >
> > host=localhost type=AVC
> msg=audit(1204060976.98:110):
> > avc: denied { execstack } for pid=20500
> > comm="plugin-config"
> >
>
scontext=unconfined_u:unconfined_r:nsplugin_config_t:s0-s0:c0.c1023
> >
>
tcontext=unconfined_u:unconfined_r:nsplugin_config_t:s0-s0:c0.c1023
> > tclass=process
> >
> > host=localhost type=SYSCALL
> > msg=audit(1204060976.98:110): arch=40000003
> > syscall=125 success=no exit=-13 a0=bf957000
> a1=1000
> > a2=1000007 a3=fffff000 items=0 ppid=20498
> pid=20500
> > auid=500 uid=500 gid=500 euid=0 suid=0 fsuid=0
> > egid=500 sgid=500 fsgid=500 tty=(none) ses=1
> > comm="plugin-config"
> > exe="/usr/lib/nspluginwrapper/plugin-config"
> >
>
subj=unconfined_u:unconfined_r:nsplugin_config_t:s0-s0:c0.c1023
> > key=(null)
> >
> >
> >
> >
> Will add to tonights policy update.
> >
> >
>
____________________________________________________________________________________
> > Be a better friend, newshound, and
> > know-it-all with Yahoo! Mobile. Try it now.
>
http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
>
> >
> > --
> > fedora-selinux-list mailing list
> > fedora-selinux-list at redhat.com
> >
>
https://www.redhat.com/mailman/listinfo/fedora-selinux-list
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.8 (GNU/Linux)
> Comment: Using GnuPG with Fedora -
> http://enigmail.mozdev.org
>
>
iEYEARECAAYFAkfFvTEACgkQrlYvE4MpobM7kwCfbudvNu7595pzZpJlFY8bnhZm
> jVkAnAj0tVLXKeYEC+u47oF20ZhXBTX2
> =s/HR
> -----END PGP SIGNATURE-----
>
Thank you very much. :) Your efforts are greatly
appreciated. Sorry for sending all of the
setroubleshoot complaints. I am sending another one
after this message.
Regards,
Antonio
____________________________________________________________________________________
Be a better friend, newshound, and
know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
More information about the fedora-test-list
mailing list