RE: Support for the NX client

[Frederick New]

On 13. aprill 2006. a. 11:10, Aurelien Bompard wrote:
>  
>  I should be able to run "chcon -t testrel_shlib_t 
>  /usr/NX/lib/libXcomp.so.1"
>  and make it work. Except this commands gives me :
>  
>  chcon: failed to change context of /usr/NX/lib/libXcomp.so.1 to
>  system_u:object_r:testrel_shlib_t: Invalid argument
>  
>  Is this type not valid on FC5 ? Which leads me to: how can I list the
>  available types on the system ? 
This is a small typo in the wiki.  It should be textrel_shlib_t.

Fred

Support for the NX client

[Paul Howarth]

On Thu, 2006-04-13 at 11:18 +0300, Frederick New wrote:
>  On 13. aprill 2006. a. 11:10, Aurelien Bompard wrote:
>  > 
>  > I should be able to run "chcon -t testrel_shlib_t 
>  > /usr/NX/lib/libXcomp.so.1"
>  > and make it work. Except this commands gives me :
>  > 
>  > chcon: failed to change context of /usr/NX/lib/libXcomp.so.1 to
>  > system_u:object_r:testrel_shlib_t: Invalid argument
>  > 
>  > Is this type not valid on FC5 ? Which leads me to: how can I list the
>  > available types on the system ?
>  
>  This is a small typo in the wiki.  It should be textrel_shlib_t. 
I just fixed the typo in the wiki. Unfortunately the error crept into
the released FAQ at http://fedora.redhat.com/docs/selinux-faq-fc5/ too
but I see that that's been fixed now as well.

Paul.

Support for the NX client

[Aurelien Bompard]

>  This is a small typo in the wiki.  It should be textrel_shlib_t.
OK, thanks. For the record, to have the NX client work on FC-5, one have to
run : 
chcon -t textrel_shlib_t /usr/NX/lib/libXcomp.so.1 /usr/NX/lib/libjpeg.so.62

I'll contact them to have them add this to their rpm, together with the
corresponding semanage call, which should be :
semanage fcontext -a -t textrel_shlib_t /usr/NX/lib/libXcomp.so.1
semanage fcontext -a -t textrel_shlib_t /usr/NX/lib/libjpeg.so.62

Thanks for your help

Aurélien
-- 
http://aurelien.bompard.org  ~~~~  Jabber : abompard(a)jabber.fr
Unix IS user-friendly. It is just very picky about who his friends are.

Support for the NX client

[Paul Howarth]

Aurelien Bompard wrote:
> > This is a small typo in the wiki.  It should be textrel_shlib_t.
>  
>  OK, thanks. For the record, to have the NX client work on FC-5, one have to
>  run : 
>  chcon -t textrel_shlib_t /usr/NX/lib/libXcomp.so.1 /usr/NX/lib/libjpeg.so.62
>  
>  I'll contact them to have them add this to their rpm, together with the
>  corresponding semanage call, which should be :
>  semanage fcontext -a -t textrel_shlib_t /usr/NX/lib/libXcomp.so.1
>  semanage fcontext -a -t textrel_shlib_t /usr/NX/lib/libjpeg.so.62 
I doubt that they'd want to put FC5-specific stuff in a package that was 
meant for multiple distributions. And if the package was supposed to be 
for FC5 specifically, there would no need to ship libjpeg.so.62 (which 
is part of core), nor would there be a need for that library to be 
textrel_shlib_t (the core version built using FC5 %{optflags} isn't).

Paul.

Support for the NX client

[Aurelien Bompard]

Paul Howarth wrote:

>  Aurelien Bompard wrote:
> >> This is a small typo in the wiki.  It should be textrel_shlib_t.
> > 
> > OK, thanks. For the record, to have the NX client work on FC-5, one have
> > to run :
> > chcon -t textrel_shlib_t /usr/NX/lib/libXcomp.so.1
> > /usr/NX/lib/libjpeg.so.62
> > 
> > I'll contact them to have them add this to their rpm, together with the
> > corresponding semanage call, which should be :
> > semanage fcontext -a -t textrel_shlib_t /usr/NX/lib/libXcomp.so.1
> > semanage fcontext -a -t textrel_shlib_t /usr/NX/lib/libjpeg.so.62
>  
>  I doubt that they'd want to put FC5-specific stuff in a package that was
>  meant for multiple distributions. 
They already do. The rpm is meant for multiple distributions, and the
scriptlets handle the different cases.
$ rpm -q --scripts  nxclient | wc -l
527
Yes, scary, but that happens a lot with proprietary packages.

Aurélien
-- 
http://aurelien.bompard.org  ~~~~  Jabber : abompard(a)jabber.fr
L'expérience est quelquechose que l'on acquiert
juste après en avoir eu besoin.

Support for the NX client

[Daniel J Walsh]

Aurelien Bompard wrote:
> > This is a small typo in the wiki.  It should be textrel_shlib_t.
> >     
>
>  OK, thanks. For the record, to have the NX client work on FC-5, one have to
>  run : 
>  chcon -t textrel_shlib_t /usr/NX/lib/libXcomp.so.1 /usr/NX/lib/libjpeg.so.62
>
>  I'll contact them to have them add this to their rpm, together with the
>  corresponding semanage call, which should be :
>  semanage fcontext -a -t textrel_shlib_t /usr/NX/lib/libXcomp.so.1
>  semanage fcontext -a -t textrel_shlib_t /usr/NX/lib/libjpeg.so.62
>
>  Thanks for your help
>
>  Aurélien
>     
Tell them to try to fix their libraries so they do not require execmod 
privs.

http://people.redhat.com/drepper/selinux-mem.html

Thanks,

Dan