selinux fedora 3 selinux-policy-targeted-1.17.30-3.15 update breaks some programs

[alberto passariello]

while this update fixes some problems there are some still open.

Jun 30 17:14:58 tiger kernel: audit(1120144498.202:0): avc:  denied
{ execmod } for  pid=6950 comm=python
path=/usr/lib/wingide2.0/bin/2.3/external/pyscintilla2/_scintilla.so
dev=sda2 ino=8555070 scontext=user_u:system_r:unconfined_t
tcontext=system_u:object_r:bin_t tclass=file

this was caught while starting wing IDE ( a python RAD software )

---------------------------------------- 
Alberto Passariello
      Byte Works Sistemi S.r.l.
Cisco Systems partner Premier certified
           Viale Liegi 44,
             00198 Roma
Tel: [phone] 
Fax: [phone] 
Email: apassariello(a)byworks.com
-----------------------------------------------

[Jason L Tibbitts III]

> >>>> "ap" == alberto passariello
> <apassariello(a)byworks.com&gt; writes: 
ap> Jun 30 17:14:58 tiger kernel: audit(1120144498.202:0): avc: denied
ap> { execmod } for pid=6950 comm=python
ap> path=/usr/lib/wingide2.0/bin/2.3/external/pyscintilla2/_scintilla.so
ap> dev=sda2 ino=8555070 scontext=user_u:system_r:unconfined_t
ap> tcontext=system_u:object_r:bin_t tclass=file

The program shouldn't be putting libraries under a bin directory.  Try:

chcon system_u:object_r:shlib_t /usr/lib/wingide2.0/bin/2.3/external/pyscintilla2/*.so

as a workaround, and then work to get the package fixed so that it
puts libraries separate from binaries.

 - J<