odd message - execmod related

[Genes MailLists]

  I was trying to test the early version of thunbderbird 3.3 and got the
following :

-------------------
SELinux is preventing
/opt/Local/vers/mozilla/released/thunderbird-3.3a1pre-100930/thunderbird-bin
"execmod" access to
/opt/Local/vers/mozilla/released/thunderbird-3.3a1pre-100930/libxul.so.
-------------------
SELinux denied access requested by
/opt/Local/vers/mozilla/released/thunderbird-3.3a1pre-100930/thunderbird-bin.
/opt/Local/vers/mozilla/released/thunderbird-3.3a1pre-100930/thunderbird-bin
is mislabeled.
/opt/Local/vers/mozilla/released/thunderbird-3.3a1pre-100930/thunderbird-bin
default SELinux type is usr_t, but its current type is usr_t. Changing
this file back to the default type, may fix your problem. If you believe
this is a bug, please file a bug report against this package. Allowing
AccessYou can restore the default system context to this file by
executing the restorecon command. resto
-----------------------------------

 (1) Note the message: "default SELinux type is usr_t, but its current
type is usr_t."

confuses me ... ?


setebool -P execmod 1

allowed it run - but that seems like way overkill.

 (2)  What is the 'right' way to allow
/opt/Local/vers/mozilla/released/thunderbird-3.3a1pre-100930/libxul.so
to be execmod'ed (or whatever its called) ?

 Thanks

 gene/

[Genes MailLists]

On 09/30/2010 02:35 PM, Genes MailLists wrote:
>   

   Forgot to add this - doing ls -lZ in the thunberbird dir on the 2 files :

-rwxr-xr-x. root root unconfined_u:object_r:usr_t:s0   libxul.so*
-rwxr-xr-x. root root unconfined_u:object_r:usr_t:s0   thunderbird-bin*

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 09/30/2010 02:38 PM, Genes MailLists wrote:
>  On 09/30/2010 02:35 PM, Genes MailLists wrote:
> >
>  
>  
>     Forgot to add this - doing ls -lZ in the thunberbird dir on the 2 files :
>  
>  -rwxr-xr-x. root root unconfined_u:object_r:usr_t:s0   libxul.so*
>  -rwxr-xr-x. root root unconfined_u:object_r:usr_t:s0   thunderbird-bin*
>  
>  --
>  selinux mailing list
>  selinux(a)lists.fedoraproject.org
>  https://admin.fedoraproject.org/mailman/listinfo/selinux 
chcon -t textrel_shlib_t
libxul.so*
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.10 (GNU/Linux)
> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAkyk4FsACgkQrlYvE4MpobOwpQCgwIq3UOoAjOQbZlfTOUIihMBp
> n8EAoMHz9yVoCVWWt2Ir/MJXenGeSKk3
> =9JZU
> -----END PGP SIGNATURE-----

[mike cloaked]

On Thu, Sep 30, 2010 at 8:09 PM, Daniel J Walsh <dwalsh(a)redhat.com&gt; wrote:

>  chcon -t textrel_shlib_t libxul.so* 
Or to survive restorecon do:
semanage fcontext -a -t textrel_shlib_t libxul.so*


-- 
mike c

[Genes MailLists]

On 09/30/2010 03:21 PM, mike cloaked wrote:
>  On Thu, Sep 30, 2010 at 8:09 PM, Daniel J Walsh
> <dwalsh(a)redhat.com&gt; wrote:
>  
> > chcon -t textrel_shlib_t libxul.so*
>  
>  Or to survive restorecon do:
>  semanage fcontext -a -t textrel_shlib_t libxul.so*
>  
>   
  Thanks Dan / Mike ... funny I did not need to do this with earlier
version of thuderbird ... only this one.

  g/

[Dominick Grift]

Might want to report this to thunderburd. Preferably they fix it by  not requiring text
relocation.
----- Oorspronkelijk bericht -----
>  
>      I was trying to test the early version of thunbderbird 3.3 and got the
>  following :
>  
>  -------------------
>  SELinux is preventing
>  /opt/Local/vers/mozilla/released/thunderbird-3.3a1pre-100930/thunderbird-bin
>  "execmod" access to
>  /opt/Local/vers/mozilla/released/thunderbird-3.3a1pre-100930/libxul.so.
>  -------------------
>  SELinux denied access requested by
>  /opt/Local/vers/mozilla/released/thunderbird-3.3a1pre-100930/thunderbird-bin.
>  /opt/Local/vers/mozilla/released/thunderbird-3.3a1pre-100930/thunderbird-bin
>  is mislabeled.
>  /opt/Local/vers/mozilla/released/thunderbird-3.3a1pre-100930/thunderbird-bin
>  default SELinux type is usr_t, but its current type is usr_t. Changing
>  this file back to the default type, may fix your problem. If you believe
>  this is a bug, please file a bug report against this package. Allowing
>  AccessYou can restore the default system context to this file by
>  executing the restorecon command. resto
>  -----------------------------------
>  
>    (1) Note the message: "default SELinux type is usr_t, but its current
>  type is usr_t."
>  
>  confuses me ... ?
>  
>  
>  setebool -P execmod 1
>  
>  allowed it run - but that seems like way overkill.
>  
>    (2)   What is the 'right' way to allow
>  /opt/Local/vers/mozilla/released/thunderbird-3.3a1pre-100930/libxul.so
>  to be execmod'ed (or whatever its called) ?
>  
>    Thanks
>  
>    gene/
>  --
>  selinux mailing list
>  selinux(a)lists.fedoraproject.org
>  https://admin.fedoraproject.org/mailman/listinfo/selinux

[Genes MailLists]

On 09/30/2010 06:10 PM, Dominick Grift wrote:
>  > Might want to report this to thunderburd. Preferably they fix
> it
> > by  not requiring text relocation. 

   seems to be reported already:

    https://bugzilla.mozilla.org/show_bug.cgi?id=595112

gene/

[Genes MailLists]

On 09/30/2010 09:53 PM, Genes MailLists wrote:

>  
>     seems to be reported already:
>  
>      https://bugzilla.mozilla.org/show_bug.cgi?id=595112
>  
  This affects firefox 4 and thunderbird > 3.1. Hopefully they will fix
it ...