RPM problem
by Alan
I am encountering a problem that needs some sort of fix. Not urgent, but
it is something that eventually needs to be solved.
I have a laptop that has heat issues. Given a hard enough workload it
will overheat and shutdown. (I have yet to find out where the temperature
setting is at for this shutdown. Hints would be much appreciated.)
The big problem happens when I am updating RPMs and the system overheats.
I get a bunch of packages that have installed bits and no cleanup, which
means it thinks it has two version installed. Even more fun is that this
system is an x86_64. I get cases where I have the i386 version at one
revision and the x86_64 at another. And you cannot just update because
yum/rpm finds a conflict from the other package that is not getting
upgraded.
I have had other systems crash in the middle of the upgrade. Fixing the
problem is always unpleasant. (Usually I have to figure out which packages
got bjorked and uninstall and reinstall with extreme --force.)
Anyone looking at making yum and/or rpm deal with this sort of problem?
16 years, 1 month
SELinux is preventing seamonkey-bin from making the program stack executable.
by Antonio Olivares
Dear all,
After applying the fix suggested by Mr. Walsh,
[root@localhost ~]# setsebool -P
allow_unconfined_nsplugin_transition=1
allow_nsplugin_execmem=1
[root@localhost ~]# getsebool -a | grep nsp
allow_nsplugin_execmem --> on
allow_unconfined_nsplugin_transition --> on
Seamonkey is asking permission for the stack. I do
not want to allow access if it is not correct for
seamonkey to allow stack execution. Please help me
nail this one as well and crossing my fingers that
firefox/minefield does not ask as well.
Summary:
SELinux is preventing seamonkey-bin from making the
program stack executable.
Detailed Description:
The seamonkey-bin application attempted to make its
stack executable. This is a
potential security problem. This should never ever be
necessary. Stack memory is
not executable on most OSes these days and this will
not change. Executable
stack memory is one of the biggest security problems.
An execstack error might
in fact be most likely raised by malicious code.
Applications are sometimes
coded incorrectly and request this permission. The
SELinux Memory Protection
Tests
(http://people.redhat.com/drepper/selinux-mem.html)
web page explains how
to remove this requirement. If seamonkey-bin does not
work and you need it to
work, you can configure SELinux temporarily to allow
this access until the
application is fixed. Please file a bug report
(http://bugzilla.redhat.com/bugzilla/enter_bug.cgi)
against this package.
Allowing Access:
Sometimes a library is accidentally marked with the
execstack flag, if you find
a library with this flag you can clear it with the
execstack -c LIBRARY_PATH.
Then retry your application. If the app continues to
not work, you can turn the
flag back on with execstack -s LIBRARY_PATH.
Otherwise, if you trust
seamonkey-bin to run correctly, you can change the
context of the executable to
unconfined_execmem_exec_t. "chcon -t
unconfined_execmem_exec_t
'/usr/lib/seamonkey-1.1.8/seamonkey-bin'" You must
also change the default file
context files on the system in order to preserve them
even on a full relabel.
"semanage fcontext -a -t unconfined_execmem_exec_t
'/usr/lib/seamonkey-1.1.8/seamonkey-bin'"
Fix Command:
chcon -t unconfined_execmem_exec_t
'/usr/lib/seamonkey-1.1.8/seamonkey-bin'
Additional Information:
Source Context
unconfined_u:unconfined_r:unconfined_t:SystemLow-
SystemHigh
Target Context
unconfined_u:unconfined_r:unconfined_t:SystemLow-
SystemHigh
Target Objects None [ process ]
Source firefox
Source Path
/usr/lib/firefox-3.0b3pre/firefox
Port <Unknown>
Host localhost
Source RPM Packages seamonkey-1.1.8-4.fc9
Target RPM Packages
Policy RPM
selinux-policy-3.3.0-1.fc9
Selinux Enabled True
Policy Type targeted
MLS Enabled True
Enforcing Mode Enforcing
Plugin Name allow_execstack
Host Name localhost
Platform Linux localhost
2.6.25-0.65.rc2.git7.fc9 #1 SMP
Sat Feb 23 23:06:09 EST
2008 i686 athlon
Alert Count 140
First Seen Fri 01 Feb 2008 05:08:54
PM CST
Last Seen Tue 26 Feb 2008 03:17:04
PM CST
Local ID
c4806f30-a6dc-43b0-8901-5531075795f7
Line Numbers
Raw Audit Messages
host=localhost type=AVC msg=audit(1204060624.602:108):
avc: denied { execstack } for pid=20290
comm="seamonkey-bin"
scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
tclass=process
host=localhost type=SYSCALL
msg=audit(1204060624.602:108): arch=40000003
syscall=125 success=no exit=-13 a0=bfc72000 a1=1000
a2=1000007 a3=fffff000 items=0 ppid=1 pid=20290
auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500
egid=500 sgid=500 fsgid=500 tty=(none) ses=1
comm="seamonkey-bin"
exe="/usr/lib/seamonkey-1.1.8/seamonkey-bin"
subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
key=(null)
____________________________________________________________________________________
Looking for last minute shopping deals?
Find them fast with Yahoo! Search. http://tools.search.yahoo.com/newsearch/category.php?category=shopping
16 years, 1 month
SELinux is preventing npviewer.bin (nsplugin_t) "search" to ./pcm (alsa_etc_rw_t)
by Antonio Olivares
What is npviewr?
What does it do?
Setroubleshoot reports that it is causing trouble:
Summary:
SELinux is preventing npviewer.bin (nsplugin_t)
"search" to ./pcm
(alsa_etc_rw_t).
Detailed Description:
SELinux denied access requested by npviewer.bin. It is
not expected that this
access is required by npviewer.bin and this access may
signal an intrusion
attempt. It is also possible that the specific version
or configuration of the
application is causing it to require additional
access.
Allowing Access:
Sometimes labeling problems can cause SELinux denials.
You could try to restore
the default system file context for ./pcm,
restorecon -v './pcm'
If this does not work, there is currently no automatic
way to allow this access.
Instead, you can generate a local policy module to
allow this access - see FAQ
(http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385)
Or you can disable
SELinux protection altogether. Disabling SELinux
protection is not recommended.
Please file a bug report
(http://bugzilla.redhat.com/bugzilla/enter_bug.cgi)
against this package.
Additional Information:
Source Context
unconfined_u:unconfined_r:nsplugin_t:SystemLow-
SystemHigh
Target Context
system_u:object_r:alsa_etc_rw_t
Target Objects ./pcm [ dir ]
Source npviewer.bin
Source Path
/usr/lib/nspluginwrapper/npviewer.bin
Port <Unknown>
Host localhost
Source RPM Packages
nspluginwrapper-0.9.91.5-22.fc9
Target RPM Packages
Policy RPM
selinux-policy-3.3.0-1.fc9
Selinux Enabled True
Policy Type targeted
MLS Enabled True
Enforcing Mode Enforcing
Plugin Name catchall_file
Host Name localhost
Platform Linux localhost
2.6.25-0.65.rc2.git7.fc9 #1 SMP
Sat Feb 23 23:06:09 EST
2008 i686 athlon
Alert Count 1
First Seen Tue 26 Feb 2008 03:24:34
PM CST
Last Seen Tue 26 Feb 2008 03:24:34
PM CST
Local ID
21b2a4d1-ec93-4670-a34e-841d82827177
Line Numbers
Raw Audit Messages
host=localhost type=AVC msg=audit(1204061074.835:111):
avc: denied { search } for pid=20571
comm="npviewer.bin" name="pcm" dev=dm-0 ino=28344759
scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023
tcontext=system_u:object_r:alsa_etc_rw_t:s0 tclass=dir
host=localhost type=SYSCALL
msg=audit(1204061074.835:111): arch=40000003 syscall=5
success=no exit=-13 a0=906d258 a1=0 a2=1b6 a3=0
items=0 ppid=20512 pid=20571 auid=500 uid=500 gid=500
euid=500 suid=500 fsuid=500 egid=500 sgid=500
fsgid=500 tty=(none) ses=1 comm="npviewer.bin"
exe="/usr/lib/nspluginwrapper/npviewer.bin"
subj=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023
key=(null)
Regards,
Antonio
____________________________________________________________________________________
Never miss a thing. Make Yahoo your home page.
http://www.yahoo.com/r/hs
16 years, 1 month
System-config-services crashes
by Antonio M
system-config-services crashes with an error in call exec ()
system-config-services-0.99.0-1.fc9.noarch
--
Antonio Montagnani
Skype : antoniomontag
16 years, 1 month
2.6.24.3-12 for F8, and other stuff...
by Gilbert Sebenste
Just an FYI...
2.6.24.3-12 works fine on F8, EXCEPT that for some reason, I had to delete
my network profile on system-config-network (SCN), and then reinstall my
network cards using SCN. Before I did that, It would display my eth0 card
as "eth0.bak", and not work. Eth1 (I have two cards) didn't show up at
all. Rebooting back to 2.6.23.15 got them back. In either case, I am on
2.6.24.3-12, with all my network cards present and working fine now,
after reinstalling both.
Also, when I do an autologin on a non-root account using Gnome, I get a
message I don't get when I log into root: A dialog box says Gnome expects
a keyboard of something else, rather thanthe one X has found. The dialog
box asks me if I want to use the keyboard that X found or Gnome found. If
I use what Gnome found, the keyboard doesn't work. If I use what X found, it
works fine. How can I tell it to always use the one X found, or is there a
deeper issue that needs to be addressed here?
Thanks,
Gilbert
*******************************************************************************
Gilbert Sebenste ********
(My opinions only!) ******
*******************************************************************************
16 years, 1 month
rawhide report: 20080227 changes
by Fedora compose checker
New package pakchois
A wrapper library for PKCS#11
New package perl-Log-Trivial
Very simple tool for writing very simple log files
Removed package kio_resources
Updated Packages:
anaconda-11.4.0.40-1
--------------------
* Tue Feb 26 2008 Jeremy Katz <katzj(a)redhat.com> - 11.4.0.40-1
- Use non-deprecated HAL properties. (notting)
- More crud to deal with the fact that rawhide trees are composed weird (katzj)
- Gtk does not have the error type, use custom with proper
icons. (#224636) (msivak)
asterisk-1.6.0-0.2.beta4.fc9
----------------------------
* Tue Feb 26 2008 Jeffrey C. Ollie <jeff(a)ocjtech.us> - 1.6.0-0.2.beta4
- Add patch from David Woodhouse that fixes building on PPC64.
* Tue Feb 26 2008 Jeffrey C. Ollie <jeff(a)ocjtech.us> - 1.6.0-0.1.beta4
- Update to 1.6.0 beta 4
bodhi-0.4.10-3.fc9
------------------
* Tue Feb 26 2008 Luke Macken <lmacken(a)redhat.com> - 0.4.10-3
- Add python-bugzilla to our server requirements
cernlib-2006-27.fc9
-------------------
* Tue Feb 26 2008 Patrice Dumas <pertusus at free.fr> 2006-27
- new mclibs and geant321 patchsets
cernlib-g77-2006-27.fc9
-----------------------
* Tue Feb 26 2008 Patrice Dumas <pertusus at free.fr> 2006-27
- new mclibs and geant321 patchsets
cln-1.2.0-1.fc9
---------------
* Mon Feb 25 2008 Quentin Spencer <qspencer(a)users.sf.net> 1.2.0-1
- Update to 1.2.0.
- Update License tag.
* Tue Feb 19 2008 Fedora Release Engineering <rel-eng(a)fedoraproject.org> - 1.1.13-5
- Autorebuild for GCC 4.3
cups-1:1.3.6-4.fc9
------------------
* Tue Feb 26 2008 Tim Waugh <twaugh(a)redhat.com> 1:1.3.6-4
- LSB header for initscript (bug #246897).
- Move HTML-related files to main application directory so that the CUPS
web interface still works even with --excludedocs (bug #375631).
* Tue Feb 26 2008 Tim Waugh <twaugh(a)redhat.com> 1:1.3.6-3
- Set MaxLogSize to 0 to prevent log rotation. Upstream default is 1Mb, but
we want logrotate to be in charge.
cupsddk-1.2.3-4.fc9
-------------------
* Tue Feb 26 2008 Tim Waugh <twaugh(a)redhat.com> 1.2.3-4
- Tidy up documentation files.
debootstrap-1.0.8-1.fc9
-----------------------
* Fri Feb 22 2008 Lubomir Kundrak <lkundrak(a)redhat.com> - 1.0.8-1
- 1.0.8
devhelp-0.19-4.fc9
------------------
* Tue Feb 26 2008 Martin Stransky <stransky(a)redhat.com> - 0.19-4
- Rebuild against xulrunner
* Tue Feb 19 2008 Fedora Release Engineering <rel-eng(a)fedoraproject.org> - 0.19-3
- Autorebuild for GCC 4.3
* Sun Feb 17 2008 Matthew Barnes <mbarnes(a)redhat.com> - 0.19-2.fc9
- Rebuild with GCC 4.3
eel2-2.21.92-1.fc9
------------------
* Tue Feb 26 2008 Tomas Bzatek <tbzatek(a)redhat.com> - 2.21.92-1
- Update to 2.21.92
epiphany-2.21.92-2.fc9
----------------------
* Tue Feb 26 2008 Christopher Aillon <caillon(a)redhat.com> - 2.21.92-2
- Stop shipping LowContrastLargePrint icons
* Tue Feb 26 2008 Christopher Aillon <caillon(a)redhat.com> - 2.21.92-1
- Update to 2.21.92
- Update the xulrunner patch
- BR: avahi-gobject-devel
- Fix the file list
* Wed Feb 06 2008 Matthias Clasen <mclasen(a)redhat.com> - 2.21.90-2
- Fix some cosmetic packaging issues
epiphany-extensions-2.21.92-1.fc9
---------------------------------
* Tue Feb 26 2008 Christopher Aillon <caillon(a)redhat.com> - 2.21.92-1
- Update to 2.91.92
- Build against xulrunner 4realz, yo
* Wed Jan 09 2008 Alex Lancaster <alexlan[AT]fedoraproject org> - 2.20.1-4
- Switch to building against xulrunner (gecko 1.9) rather than firefox
espeak-1.31-5.fc9
-----------------
* Tue Feb 26 2008 Francois Aucamp <faucamp(a)fedoraproject.org> - 1.31-5
- Export ESPEAK_DATA_PATH in %build to allow proper compilation of voice dictionaries
firefox-3.0-0.beta3.28.nightly20080226.fc9
------------------------------------------
* Tue Feb 26 2008 Christopher Aillon <caillon(a)redhat.com> 3.0-0.beta3.28
- Update to latest trunk (2008-02-26)
freetds-0.64-11.fc9
-------------------
* Tue Feb 26 2008 Dmitry Butskoy <Dmitry(a)Butskoy.name> - 0.64-11
- fix "64 or 32 bit" test (#434975)
glest-3.1.1-1.fc9
-----------------
* Tue Feb 26 2008 Aurelien Bompard <abompard(a)fedoraproject.org> 3.1.1-1
- version 3.1.1
gnome-applet-music-2.3.0-2.fc9
------------------------------
* Tue Feb 26 2008 Peter Gordon <peter(a)thecodergeek.com> - 2.3.0-2
- Add a Spanish translation for the package (sent upstream) and for the Summary
and %description.
+ es.po
+ add-es-translation.patch
* Mon Feb 25 2008 Peter Gordon <peter(a)thecodergeek.com> - 2.3.0-1
- Update to new upstream release (2.3.0). Adds support for Audacious, Amarok,
and VLC.
- Simplify %files listing a bit.
gnome-applets-1:2.21.92-1.fc9
-----------------------------
* Tue Feb 26 2008 Matthias Clasen <mclasen(a)redhat.com> - 1:2.21.92-1
- Update to 2.21.92
gnome-desktop-2.21.92-2.fc9
---------------------------
* Tue Feb 26 2008 Matthias Clasen <mclasen(a)redhat.com> - 2.21.92-2
- Fix a bug in the multires patch
* Tue Feb 26 2008 Matthias Clasen <mclasen(a)redhat.com> - 2.21.92-1
- Update to 2.21.92
gnome-menus-2.21.92-1.fc9
-------------------------
* Tue Feb 26 2008 Matthias Clasen <mclasen(a)redhat.com> - 2.21.92-1
- Update to 2.21.92
gnome-panel-2.21.92-1.fc9
-------------------------
* Tue Feb 26 2008 Matthias Clasen <mclasen(a)redhat.com> - 2.21.92-1
- Update to 2.21.92
gnome-pilot-2.0.16-1.fc9
------------------------
* Tue Feb 26 2008 Matthew Barnes <mbarnes(a)redhat.com> - 2.0.16-1.fc9
- Update to 2.0.16
- Remove patch for RH bug #198211 (fixed upstream).
gnome-pilot-conduits-2.0.16-1.fc9
---------------------------------
* Tue Feb 26 2008 Matthew Barnes <mbarnes(a)redhat.com> - 2.0.16-1.fc9
- Update to 2.0.16
gnome-session-2.21.92-1.fc9
---------------------------
* Tue Feb 26 2008 Matthias Clasen <mclasen(a)redhat.com> - 2.21.92-1
- Update to 2.21.92
gnome-terminal-2.21.92-1.fc9
----------------------------
* Tue Feb 26 2008 Matthias Clasen <mclasen(a)redhat.com> - 2.21.92-1
- Update to 2.21.92
gvfs-0.1.8-1.fc9
----------------
* Mon Feb 25 2008 Alexander Larsson <alexl(a)redhat.com> - 0.1.8-1
- Update to 0.1.8
hippo-canvas-0.2.26-1.fc9
-------------------------
* Tue Feb 26 2008 Colin Walters <walters(a)redhat.com> - 0.2.26-1
- Update to 0.2.26
igraph-0.5-13.fc9
-----------------
* Tue Feb 26 2008 Neal Becker <ndbecker2(a)gmail.com> - 0.5-13
- More test fixes
* Tue Feb 26 2008 Neal Becker <ndbecker2(a)gmail.com> - 0.5-12
- Fix to ignore 1 bad test
* Tue Feb 26 2008 Neal Becker <ndbecker2(a)gmail.com> - 0.5-11
- Add patch for tests for gcc-4.3
initscripts-8.64-1
------------------
* Tue Feb 26 2008 Bill Nottingham <notting(a)redhat.com> - 8.64-1
- Add a console_init udev helper to do console initialization
- add /sbin/pidof requirement (#434863)
* Fri Feb 01 2008 Bill Nottingham <notting(a)redhat.com> - 8.63-1
- don't start RAID arrays in rc.sysinit, that's done by udev (corollary of #429604)
- add a NetworkManager-dispatcher script that does netreport on interface changes
- use udev rules to set the clock, avoiding issues with modular rtcs (#290731)
* Mon Jan 21 2008 Bill Nottingham <notting(a)redhat.com> - 8.62-1
- rc.d/rc.sysinit: fix syntax error (#429556)
- migrate sr@Latn -> sr@latin (<kmilos(a)gmail.com>)
iso-codes-1.9-1.fc9
-------------------
* Wed Feb 27 2008 Christopher Aillon <caillon(a)redhat.com> 1.9-1
- Update to 1.9
* Tue Feb 05 2008 Matthias Clasen <mclasen(a)redhat.com> 1.8-2
- Bump gettext BR
- Use the smaller .bz2 tarball
jd-2.0.0-0.3.svn1879_trunk.fc9
------------------------------
* Wed Feb 27 2008 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 2.0.0-0.3.svn1879
- svn 1879 (version 2.0.0)
* Mon Feb 25 2008 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 1.9.9-0.3.beta080225
- 1.9.9 beta 080225
* Sat Feb 09 2008 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp>
- Remove patch for gcc43 (applied by upstream)
- Remove workarround for libsigc++ side bug
jokosher-1.0-0.2.20080216svn.fc9
--------------------------------
* Wed Feb 27 2008 Christopher Brown <snecklifter(a)gmail.com> - 1.0-0.2.20080216svn
- Bump for upgrade path
* Sat Feb 16 2008 Christopher Brown <snecklifter(a)gmail.com> - 1.0-0.1.20080216svn
- Update to latest svn
* Mon Jan 21 2008 Christopher Brown <snecklifter(a)gmail.com> - 1.0-0.1.20080121svn
- update to latest svn
- resolve python egg build issues
kbd-1.12-31.fc9
---------------
* Tue Feb 26 2008 Vitezslav Crhonek <vcrhonek(a)redhat.com> - 1.12-31
- Fix trq.map
Resolves: #216710
kernel-2.6.25-0.69.rc3.git1.fc9
-------------------------------
* Tue Feb 26 2008 Dave Jones <davej(a)redhat.com>
- 2.6.25-rc3-git1
* Tue Feb 26 2008 Dave Jones <davej(a)redhat.com>
- kludge to make ich9 e1000 work
- Drop older unnecessary e1000 workarounds.
* Mon Feb 25 2008 Jarod Wilson <jwilson(a)redhat.com>
- firewire: fix crashes in workqueue jobs
- firewire: endian fixes
krb5-1.6.3-8.fc9
----------------
* Tue Feb 26 2008 Nalin Dahyabhai <nalin(a)redhat.com> 1.6.3-8
- ftp: add patch to fix "runique on" case when globbing fixes applied
- stop adding a redundant but harmless call to initialize the gssapi internals
* Mon Feb 25 2008 Nalin Dahyabhai <nalin(a)redhat.com>
- add patch to suppress double-processing of /etc/krb5.conf when we build
with --sysconfdir=/etc, thereby suppressing double-logging (#231147)
* Mon Feb 25 2008 Nalin Dahyabhai <nalin(a)redhat.com>
- remove a patch, to fix problems with interfaces which are "up" but which
have no address assigned, which conflicted with a different fix for the same
problem in 1.5 (#200979)
kvm-62-1.fc9
------------
* Tue Feb 26 2008 Jeremy Katz <katzj(a)redhat.com> - 62-1
- Update to kvm-62
libgweather-2.21.92-1.fc9
-------------------------
* Tue Feb 26 2008 Matthias Clasen <mclasen(a)redhat.com> 2.21.92-1
- Update to 2.21.92
liboil-0.3.13-3.fc9
-------------------
* Tue Feb 26 2008 Matthias Clasen <mclasen(a)redhat.com> - 0.3.13-3
- Use the upstream fix instead
libpfm-3.3-0.080225.2.fc9
-------------------------
* Tue Feb 26 2008 Will Cohen <wcohen(a)redhat.com> - 3.3-0.080225.2
- Correct possibly unitialized variable umask. Resolves: rhbz #434968
libsemanage-2.0.24-1.fc9
------------------------
* Tue Feb 05 2008 Dan Walsh <dwalsh(a)redhat.com> - 2.0.24-1
- Update to upstream
* make swigify
libusb-0.1.12-15.fc9
--------------------
* Tue Feb 26 2008 Jindrich Novy <jnovy(a)redhat.com> 0.1.12-15
- don't apply wakeups patch until it's fixed, it causes problems
with Eye-One Pro (#434950)
libwnck-2.21.92-1.fc9
---------------------
* Tue Feb 26 2008 Matthias Clasen <mclasen(a)redhat.com> - 2.21.92-1
- Update to 2.21.92
lyx-1.5.4-1.fc9
---------------
* Mon Feb 25 2008 Rex Dieter <rdieter(a)fedoraproject.org> 1.5.4-1
- lyx-1.5.4 (#434689)
- reintroduce xdg-utils patch (reverted upstream).
- omit bakoma ttf fonts
mesa-7.1-0.17.fc9
-----------------
* Tue Feb 26 2008 Adam Jackson <ajax(a)redhat.com> 7.1-0.17
- Fix OSMesa symlink bug. (#424545)
- Build OSMesa with -Os to be slightly less bloaty.
- Re-add osmesa.h to libOSMesa-devel.
- Really restore -fvisibility=hidden.
mkinitrd-6.0.31-1.fc9
---------------------
* Tue Feb 26 2008 Jeremy Katz <katzj(a)redhat.com> - 6.0.31-1
- Add mkliveinitrd
* Thu Feb 21 2008 Peter Jones <pjones(a)redhat.com>
- Require newer lvm2 version.
monsterz-0.7.1-3.fc9
--------------------
* Tue Feb 26 2008 Ian Chapman <packages[AT]amiga-hardware.com> 0.7.1-3
- Fix for BZ 434688
mt-daapd-0.9-0.1.1696.fc9
-------------------------
* Tue Feb 26 2008 W. Michael Petullo <mike[at]flyn.org> - 0.9-0.1.1696
- New upstream version.
nautilus-2.21.92-2.fc9
----------------------
* Tue Feb 26 2008 Tomas Bzatek <tbzatek(a)redhat.com> - 2.21.92-2
- Change libbeagle .so name for libbeagle-0.3.0 in nautilus-2.21.1-dynamic-search-r2.patch (#434722)
* Tue Feb 26 2008 Tomas Bzatek <tbzatek(a)redhat.com> - 2.21.92-1
- Update to 2.21.92
* Tue Feb 12 2008 Matthias Clasen <mclasen(a)redhat.com> - 2.21.91-1
- Update to 2.21.91
neon-0.28.0-3
-------------
* Tue Feb 26 2008 Joe Orton <jorton(a)redhat.com> 0.28.0-3
- rebuild against pakchois
nspluginwrapper-0.9.91.5-23.fc9
-------------------------------
* Tue Feb 26 2008 Martin Stransky <stransky(a)redhat.com> 0.9.91.5-23
- merged exclude patch with main tarball
- fixed #431095 - Typo in mozilla-plugin-config verbose output
nspr-4.7.0.99.1-2.fc9
---------------------
* Tue Feb 26 2008 Kai Engert <kengert(a)redhat.com> - 4.7.0.99.1-2
- Addressed cosmetic review comments from bug 226202
nss_ldap-259-1.fc9
------------------
* Tue Feb 26 2008 Nalin Dahyabhai <nalin(a)redhat.com> - 259-1
- update to nss_ldap 259
- nss_ldap: update to revised proposed patch for #248
- pam_ldap: replace two patches to handle password changing against replicas
with Ralf Haferkamp's revision, which also sends the policy control with the
initial password change request
- pam_ldap: enable patch to stop also trying to change password using
ldap_modify after trying to change it with an exop when the configuration
is "pam_password exop_send_old"
ntfs-3g-2:1.2216-3.fc9
----------------------
* Tue Feb 26 2008 Tom "spot" Callaway <tcallawa(a)redhat.com> - 2:1.2216-3
- rebuild against fixed gcc (PR35264, bugzilla 433546)
openlierox-0.57-0.8.beta4.fc9
-----------------------------
* Mon Feb 25 2008 Hans de Goede <j.w.r.degoede(a)hhs.nl> 0.57-0.8.beta4
- New upstream release 0.57beta4
perl-PDL-2.4.3-6.fc9
--------------------
* Tue Feb 26 2008 Marcela Maslanova <mmaslano(a)redhat.com> - 2.4.3-6
- remove two of hdf test for some time, because can't be build
* Tue Feb 19 2008 Fedora Release Engineering <rel-eng(a)fedoraproject.org> - 2.4.3-5
- Autorebuild for GCC 4.3
pykickstart-1.30-1.fc9
----------------------
* Tue Feb 26 2008 Chris Lumens <clumens(a)redhat.com> - 1.30-1
- Reverse writePriorities of iscsi and iscsname (#434965, jlaska).
- Fix printing of iscsiname command (#434945, jlaska).
- Don't traceback on ENOENT. (pnasrat)
- Store the mouse name as a string, not a list. (clumens)
- Update translations.
rdist-1:6.1.5-45
----------------
* Tue Feb 19 2008 Fedora Release Engineering <rel-eng(a)fedoraproject.org> - 1:6.1.5-45
- Autorebuild for GCC 4.3
rkward-0.5.0a-3.fc9
-------------------
* Mon Feb 25 2008 Pingou <pingoufc4(a)yahoo.fr> 0.5.0a-3
- Change kde-config to kde4-config to fix the build
* Mon Feb 25 2008 Pingou <pingoufc4(a)yahoo.fr> 0.5.0a-2
- Change a BR to fix to build
* Mon Feb 25 2008 Pingou <pingoufc4(a)yahoo.fr> 0.5.0a-1
- Update to 0.5.0a for KDE4
ruby-libvirt-0.0.2-4.fc9
------------------------
* Tue Feb 19 2008 Fedora Release Engineering <rel-eng(a)fedoraproject.org> - 0.0.2-4
- Autorebuild for GCC 4.3
ruby-postgres-0.7.1-8.fc9
-------------------------
* Tue Feb 19 2008 Fedora Release Engineering <rel-eng(a)fedoraproject.org> - 0.7.1-8
- Autorebuild for GCC 4.3
rusers-0.17-53.fc9
------------------
* Tue Feb 19 2008 Fedora Release Engineering <rel-eng(a)fedoraproject.org> - 0.17-53
- Autorebuild for GCC 4.3
rwall-0.17-28.fc9
-----------------
* Tue Feb 19 2008 Fedora Release Engineering <rel-eng(a)fedoraproject.org> - 0.17-28
- Autorebuild for GCC 4.3
scim-hangul-0.3.2-3.fc9
-----------------------
* Mon Feb 25 2008 Hu Zheng <zhu(a)redhat.com> - 0.3.2-3
- Gcc4.3 compile fix.
* Wed Feb 20 2008 Fedora Release Engineering <rel-eng(a)fedoraproject.org> - 0.3.2-2
- Autorebuild for GCC 4.3
screen-4.0.3-10.fc9
-------------------
* Tue Feb 26 2008 Miroslav Lichvar <mlichvar(a)redhat.com> - 4.0.3-10
- don't set xterm function keys in default config (#151556)
- always return 0 in scriptlet (#433882)
- fix pty permissions
- enable utempter support
- link with libtinfo, don't link with libutil
- spec cleanup
seahorse-2.21.92-1.fc9
----------------------
* Tue Feb 26 2008 Matthias Clasen <mclasen(a)redhat.com> 2.21.92-1
- Update to 2.21.92
selinux-policy-3.3.1-4.fc9
--------------------------
* Tue Feb 26 2008 Dan Walsh <dwalsh(a)redhat.com> 3.3.1-4
- Add cyphesis policy
* Tue Feb 26 2008 Dan Walsh <dwalsh(a)redhat.com> 3.3.1-2
- Fix Makefile.devel to build mls modules
- Fix qemu to be more specific on labeling
* Tue Feb 26 2008 Dan Walsh <dwalsh(a)redhat.com> 3.3.1-1
- Update to upstream fixes
sepostgresql-8.3.0-2.114.beta.fc9
---------------------------------
* Tue Feb 26 2008 <kaigai(a)kaigai.gr.jp> - sepostgresql-8.3.0-2.114
- BUGFIX: CREATE/ALTER TABLE with CONTEXT='...' did nothing.
* Thu Feb 07 2008 <kaigai(a)kaigai.gr.jp> - sepostgresql-8.3.0-2.108
- add /etc/logrotate.d/sepostgresql
setup-2.6.12-1.fc9
------------------
* Tue Feb 26 2008 Phil Knirsch <pknirsch(a)redhat.com> 2.6.12-1
- Corrected wrong /etc/profile.d behaviour for non-interactive bash and tcsh
sirius-0.8.0-13.fc9
-------------------
* Tue Feb 19 2008 Fedora Release Engineering <rel-eng(a)fedoraproject.org> - 0.8.0-13
- Autorebuild for GCC 4.3
squid-7:3.0.STABLE1-3.fc9
-------------------------
* Tue Feb 26 2008 Martin Nagy <mnagy(a)redhat.com> - 7:3.0.STABLE1-3
- change the cache_effective_group default back to none
* Mon Feb 11 2008 Martin Nagy <mnagy(a)redhat.com> - 7:3.0.STABLE1-2
- rebuild for 4.3
* Wed Jan 23 2008 Martin Nagy <mnagy(a)redhat.com> - 7:3.0.STABLE1-1
- upgrade to latest upstream 3.0.STABLE1
stratagus-2.2.4-4.fc9
---------------------
* Tue Feb 26 2008 Jindrich Novy <jnovy(a)redhat.com> 2.2.4-4
- fix build in gcc-4.3 (#434370)
- rebuild against new libmikmod (#434783)
* Sat Feb 23 2008 Peter Lemenkov <lemenkov(a)gmail.com> 2.2.4-3
- rebuild
* Tue Feb 19 2008 Fedora Release Engineering <rel-eng(a)fedoraproject.org> - 2.2.4-2
- Autorebuild for GCC 4.3
system-config-boot-0.2.19-1.fc9
-------------------------------
* Tue Feb 26 2008 Harald Hoyer <harald(a)redhat.com> - 0.2.19-1
- moved boot_gui.py to /usr/share/system-config-boot/
* Tue Feb 26 2008 Harald Hoyer <harald(a)redhat.com> - 0.2.18-1
- removed firstboot dependency
* Thu Sep 20 2007 Harald Hoyer <harald(a)redhat.com> - 0.2.17-1
- translation update
telescope-server-0-0.4.20070315.fc9
-----------------------------------
* Tue Feb 26 2008 Jef Spaleta <jspaleta(a)fedoraproject.org> - 0-0.4.20070315
- Patches for GCC 4.3
ttmkfdir-3.0.9-26.fc9
---------------------
* Wed Feb 27 2008 Lingning Zhang <lizhang(a)redhat.com> - 3.0.9-26
- fix bug434301.
* Tue Feb 19 2008 Fedora Release Engineering <rel-eng(a)fedoraproject.org> - 3.0.9-25
- Autorebuild for GCC 4.3
turba-2.1.7-1.fc9
-----------------
* Tue Feb 26 2008 Jan ONDREJ (SAL) <ondrejj(at)salstar.sk> 2.1.7-1
- Update to upstream: CVE-2008-0807: turba: insufficient access checks
wesnoth-1.3.16-1.fc9
--------------------
* Fri Feb 15 2008 Jon Ciesla <limb(a)jcomserv.net> - 1.3.16-1
- Update to 1.3.16.
- Updated ogg test patch.
- Corrected license tag.
- Added boost-devel BR.
- Corrected .desktop/icon handling for subpackage.
xmlrpc-c-1.13.07-2.fc9
----------------------
* Tue Feb 26 2008 Enrico Scholz <enrico.scholz(a)informatik.tu-chemnitz.de> - 1.13.07-2
- moved to advanced branched; rediffed/updated existing cmake patch
and fixed other compilation issues (#369841)
xorg-x11-drv-ati-6.8.0-2.fc9
----------------------------
* Tue Feb 26 2008 Dave Airlie <airlied(a)redhat.com> 6.8.0-2
- rebase to upstream 6.8.0 release + git fixes
xorg-x11-drv-neomagic-1.1.1-6.fc9
---------------------------------
* Wed Feb 27 2008 Dave Airlie <airlied(a)redhat.com> - 1.1.1-6
- add pciaccess support
* Wed Feb 20 2008 Fedora Release Engineering <rel-eng(a)fedoraproject.org> - 1.1.1-5
- Autorebuild for GCC 4.3
xorg-x11-drv-tdfx-1.3.0-8.fc9
-----------------------------
* Wed Feb 27 2008 Dave Airlie <airlied(a)fedoraproject.org> - 1.3.0-8
- make tdfx build again by rebasing to upstream - may not work
* Wed Feb 20 2008 Fedora Release Engineering <rel-eng(a)fedoraproject.org> - 1.3.0-7
- Autorebuild for GCC 4.3
xulrunner-1.9-0.beta3.28.nightly20080226.fc9
--------------------------------------------
* Tue Feb 26 2008 Christopher Aillon <caillon(a)redhat.com> 1.9-0.beta3.28
- Update to latest trunk (2008-02-26)
zhcon-0.2.6-7.fc9
-----------------
* Tue Feb 26 2008 Hu Zheng <zhu(a)redhat.com> - 0.2.6-7
- Gcc-4.3 compile fix.
* Wed Feb 20 2008 Fedora Release Engineering <rel-eng(a)fedoraproject.org> - 0.2.6-6
- Autorebuild for GCC 4.3
Broken deps for i386
----------------------------------------------------------
bmpx-0.40.13-7.fc8.i386 requires libsoup-2.2.so.8
bmpx-extension-0.40.13-7.fc8.i386 requires firefox = 0:2.0.0.12
boo-0.8.1.2865-2.fc9.i386 requires mono(NAnt.Core) = 0:0.85.2478.0
boo-0.8.1.2865-2.fc9.i386 requires mono(NAnt.DotNetTasks) = 0:0.85.2478.0
buoh-0.8.2-2.fc7.i386 requires libsoup-2.2.so.8
compiz-kde-0.6.2-6.fc9.i386 requires libkdecorations.so.1
drivel-2.1.1-0.3.20071130svn.fc9.i386 requires libsoup-2.2.so.8
evolution-brutus-1.1.28.7-2.fc8.i386 requires libcamel-1.2.so.10
flumotion-0.4.2-3.fc9.i386 requires pycrypto
ginac-1.4.1-1.fc9.i386 requires libcln.so.4
ginac-utils-1.4.1-1.fc9.i386 requires libcln.so.4
glest-3.1.1-1.fc9.i386 requires glest-data = 0:3.1.1
glest-data-3.1.0-1.fc9.noarch requires glest = 0:3.1.0
gnome-web-photo-0.3-8.fc9.i386 requires libgkgfx.so
gnome-web-photo-0.3-8.fc9.i386 requires libxpcom_core.so
gnome-web-photo-0.3-8.fc9.i386 requires libgtkembedmoz.so
gnome-web-photo-0.3-8.fc9.i386 requires gecko-libs = 0:1.8.1.10
kazehakase-0.5.0-1.fc9.2.i386 requires gecko-libs = 0:1.8.1.10
libqalculate-0.9.6-3.fc9.i386 requires libcln.so.4
mknbi-1.4.4-11.fc9.i386 requires perl(Nbi)
mknbi-1.4.4-11.fc9.i386 requires perl(Elf)
mknbi-1.4.4-11.fc9.i386 requires perl(TruncFD)
muine-0.8.8-7.fc9.i386 requires mono(muine-plugin) = 0:1.0.0.0
octave-forge-20071212-7.fc9.i386 requires libcln.so.4
perl-XML-Xerces-2.7.0_0-4.fc9.i386 requires libxerces-c.so.27
plplot-perl-5.8.0-10.fc9.i386 requires perl(PDL::GSL::RNG)
qalculate-0.9.6-3.fc9.i386 requires libcln.so.4
qalculate-gtk-0.9.6-3.fc9.i386 requires libcln.so.4
qalculate-kde-0.9.6-4.fc9.i386 requires libcln.so.4
sugar-0.75.0-1.fc9.i386 requires matchbox-window-manager
util-vserver-build-0.30.214-2.fc8.i386 requires libbeecrypt.so.6
Broken deps for x86_64
----------------------------------------------------------
bmpx-0.40.13-7.fc8.x86_64 requires libsoup-2.2.so.8()(64bit)
bmpx-extension-0.40.13-7.fc8.x86_64 requires firefox = 0:2.0.0.12
boo-0.8.1.2865-2.fc9.x86_64 requires mono(NAnt.Core) = 0:0.85.2478.0
boo-0.8.1.2865-2.fc9.x86_64 requires mono(NAnt.DotNetTasks) = 0:0.85.2478.0
buoh-0.8.2-2.fc7.x86_64 requires libsoup-2.2.so.8()(64bit)
compiz-kde-0.6.2-6.fc9.x86_64 requires libkdecorations.so.1()(64bit)
drivel-2.1.1-0.3.20071130svn.fc9.x86_64 requires libsoup-2.2.so.8()(64bit)
evolution-brutus-1.1.28.7-2.fc8.i386 requires libcamel-1.2.so.10
evolution-brutus-1.1.28.7-2.fc8.x86_64 requires libcamel-1.2.so.10()(64bit)
flumotion-0.4.2-3.fc9.x86_64 requires pycrypto
ginac-1.4.1-1.fc9.i386 requires libcln.so.4
ginac-1.4.1-1.fc9.x86_64 requires libcln.so.4()(64bit)
ginac-utils-1.4.1-1.fc9.x86_64 requires libcln.so.4()(64bit)
glest-3.1.1-1.fc9.x86_64 requires glest-data = 0:3.1.1
glest-data-3.1.0-1.fc9.noarch requires glest = 0:3.1.0
gnome-web-photo-0.3-8.fc9.x86_64 requires libgkgfx.so()(64bit)
gnome-web-photo-0.3-8.fc9.x86_64 requires libgtkembedmoz.so()(64bit)
gnome-web-photo-0.3-8.fc9.x86_64 requires gecko-libs = 0:1.8.1.10
gnome-web-photo-0.3-8.fc9.x86_64 requires libxpcom_core.so()(64bit)
kazehakase-0.5.0-1.fc9.2.x86_64 requires gecko-libs = 0:1.8.1.10
libqalculate-0.9.6-3.fc9.i386 requires libcln.so.4
libqalculate-0.9.6-3.fc9.x86_64 requires libcln.so.4()(64bit)
mknbi-1.4.4-11.fc9.x86_64 requires perl(Nbi)
mknbi-1.4.4-11.fc9.x86_64 requires perl(Elf)
mknbi-1.4.4-11.fc9.x86_64 requires perl(TruncFD)
muine-0.8.8-7.fc9.x86_64 requires mono(muine-plugin) = 0:1.0.0.0
octave-forge-20071212-7.fc9.x86_64 requires libcln.so.4()(64bit)
perl-XML-Xerces-2.7.0_0-4.fc9.x86_64 requires libxerces-c.so.27()(64bit)
plplot-perl-5.8.0-10.fc9.x86_64 requires perl(PDL::GSL::RNG)
qalculate-0.9.6-3.fc9.x86_64 requires libcln.so.4()(64bit)
qalculate-gtk-0.9.6-3.fc9.x86_64 requires libcln.so.4()(64bit)
qalculate-kde-0.9.6-4.fc9.x86_64 requires libcln.so.4()(64bit)
sugar-0.75.0-1.fc9.x86_64 requires matchbox-window-manager
util-vserver-build-0.30.214-2.fc8.x86_64 requires libbeecrypt.so.6()(64bit)
Broken deps for ppc
----------------------------------------------------------
bmpx-0.40.13-7.fc8.ppc requires libsoup-2.2.so.8
bmpx-extension-0.40.13-7.fc8.ppc requires firefox = 0:2.0.0.12
buoh-0.8.2-2.fc7.ppc requires libsoup-2.2.so.8
compiz-kde-0.6.2-6.fc9.ppc requires libkdecorations.so.1
drivel-2.1.1-0.3.20071130svn.fc9.ppc requires libsoup-2.2.so.8
evolution-brutus-1.1.28.7-2.fc8.ppc requires libcamel-1.2.so.10
evolution-brutus-1.1.28.7-2.fc8.ppc64 requires libcamel-1.2.so.10()(64bit)
flumotion-0.4.2-3.fc9.ppc requires pycrypto
ginac-1.4.1-1.fc9.ppc requires libcln.so.4
ginac-1.4.1-1.fc9.ppc64 requires libcln.so.4()(64bit)
ginac-utils-1.4.1-1.fc9.ppc requires libcln.so.4
gnome-web-photo-0.3-8.fc9.ppc requires libgkgfx.so
gnome-web-photo-0.3-8.fc9.ppc requires libxpcom_core.so
gnome-web-photo-0.3-8.fc9.ppc requires libgtkembedmoz.so
gnome-web-photo-0.3-8.fc9.ppc requires gecko-libs = 0:1.8.1.10
kazehakase-0.5.0-1.fc9.2.ppc requires gecko-libs = 0:1.8.1.10
libqalculate-0.9.6-3.fc9.ppc requires libcln.so.4
libqalculate-0.9.6-3.fc9.ppc64 requires libcln.so.4()(64bit)
muine-0.8.8-7.fc9.ppc requires mono(muine-plugin) = 0:1.0.0.0
octave-forge-20071212-7.fc9.ppc requires libcln.so.4
perl-XML-Xerces-2.7.0_0-4.fc9.ppc requires libxerces-c.so.27
plplot-perl-5.8.0-10.fc9.ppc requires perl(PDL::GSL::RNG)
qalculate-0.9.6-3.fc9.ppc requires libcln.so.4
qalculate-gtk-0.9.6-3.fc9.ppc requires libcln.so.4
qalculate-kde-0.9.6-4.fc9.ppc requires libcln.so.4
sugar-0.75.0-1.fc9.ppc requires matchbox-window-manager
util-vserver-build-0.30.214-2.fc8.ppc requires libbeecrypt.so.6
Broken deps for ppc64
----------------------------------------------------------
bmpx-0.40.13-7.fc8.ppc64 requires libsoup-2.2.so.8()(64bit)
bmpx-extension-0.40.13-7.fc8.ppc64 requires firefox = 0:2.0.0.12
buoh-0.8.2-2.fc7.ppc64 requires libsoup-2.2.so.8()(64bit)
drivel-2.1.1-0.3.20071130svn.fc9.ppc64 requires libsoup-2.2.so.8()(64bit)
evolution-brutus-1.1.28.7-2.fc8.ppc64 requires libcamel-1.2.so.10()(64bit)
flumotion-0.4.2-3.fc9.ppc64 requires pycrypto
ginac-1.4.1-1.fc9.ppc64 requires libcln.so.4()(64bit)
ginac-utils-1.4.1-1.fc9.ppc64 requires libcln.so.4()(64bit)
gnome-web-photo-0.3-8.fc9.ppc64 requires libgkgfx.so()(64bit)
gnome-web-photo-0.3-8.fc9.ppc64 requires libgtkembedmoz.so()(64bit)
gnome-web-photo-0.3-8.fc9.ppc64 requires gecko-libs = 0:1.8.1.10
gnome-web-photo-0.3-8.fc9.ppc64 requires libxpcom_core.so()(64bit)
kazehakase-0.5.0-1.fc9.2.ppc64 requires gecko-libs = 0:1.8.1.10
libqalculate-0.9.6-3.fc9.ppc64 requires libcln.so.4()(64bit)
octave-forge-20071212-7.fc9.ppc64 requires libcln.so.4()(64bit)
perl-Test-AutoBuild-darcs-1.2.2-1.fc9.noarch requires darcs >= 0:1.0.0
perl-XML-Xerces-2.7.0_0-4.fc9.ppc64 requires libxerces-c.so.27()(64bit)
plplot-perl-5.8.0-10.fc9.ppc64 requires perl(PDL::GSL::RNG)
qalculate-0.9.6-3.fc9.ppc64 requires libcln.so.4()(64bit)
qalculate-gtk-0.9.6-3.fc9.ppc64 requires libcln.so.4()(64bit)
qalculate-kde-0.9.6-4.fc9.ppc64 requires libcln.so.4()(64bit)
sugar-0.75.0-1.fc9.ppc64 requires matchbox-window-manager
util-vserver-build-0.30.214-2.fc8.ppc64 requires libbeecrypt.so.6()(64bit)
16 years, 1 month
SELinux is preventing plugin-config from making the program stack executable/seamonkey
by Antonio Olivares
Dear all,
I have changed the stack to allow firefox to use the
stack, then I reverted. I read Jim's exchange with
Mr. Dan Walsh and there it was mentioned about
nspluginwrapper. I installed it and I see the
following every time I start firefox/seamonkey.
I have avoided to do anything because I am not sure
what to do. One side of me tells me to do what
setroubleshoot tells me, the other tells me to ask for
advice as to which is the best way to proceed and fix
this issue(s) for good. I leave it in the hands of
the people that know best and follow your guidance
carefully.
TIA,
Antonio
Summary:
SELinux is preventing plugin-config from making the
program stack executable.
Detailed Description:
The plugin-config application attempted to make its
stack executable. This is a
potential security problem. This should never ever be
necessary. Stack memory is
not executable on most OSes these days and this will
not change. Executable
stack memory is one of the biggest security problems.
An execstack error might
in fact be most likely raised by malicious code.
Applications are sometimes
coded incorrectly and request this permission. The
SELinux Memory Protection
Tests
(http://people.redhat.com/drepper/selinux-mem.html)
web page explains how
to remove this requirement. If plugin-config does not
work and you need it to
work, you can configure SELinux temporarily to allow
this access until the
application is fixed. Please file a bug report
(http://bugzilla.redhat.com/bugzilla/enter_bug.cgi)
against this package.
Allowing Access:
Sometimes a library is accidentally marked with the
execstack flag, if you find
a library with this flag you can clear it with the
execstack -c LIBRARY_PATH.
Then retry your application. If the app continues to
not work, you can turn the
flag back on with execstack -s LIBRARY_PATH.
Otherwise, if you trust
plugin-config to run correctly, you can change the
context of the executable to
unconfined_execmem_exec_t. "chcon -t
unconfined_execmem_exec_t
'/usr/lib/nspluginwrapper/plugin-config'" You must
also change the default file
context files on the system in order to preserve them
even on a full relabel.
"semanage fcontext -a -t unconfined_execmem_exec_t
'/usr/lib/nspluginwrapper/plugin-config'"
Fix Command:
chcon -t unconfined_execmem_exec_t
'/usr/lib/nspluginwrapper/plugin-config'
Additional Information:
Source Context
unconfined_u:unconfined_r:unconfined_t:SystemLow-
SystemHigh
Target Context
unconfined_u:unconfined_r:unconfined_t:SystemLow-
SystemHigh
Target Objects None [ process ]
Source firefox
Source Path
/usr/lib/firefox-3.0b3pre/firefox
Port <Unknown>
Host localhost
Source RPM Packages
nspluginwrapper-0.9.91.5-22.fc9
Target RPM Packages
Policy RPM
selinux-policy-3.3.0-1.fc9
Selinux Enabled True
Policy Type targeted
MLS Enabled True
Enforcing Mode Enforcing
Plugin Name allow_execstack
Host Name localhost
Platform Linux localhost
2.6.25-0.65.rc2.git7.fc9 #1 SMP
Sat Feb 23 23:06:09 EST
2008 i686 athlon
Alert Count 133
First Seen Fri 01 Feb 2008 05:08:54
PM CST
Last Seen Tue 26 Feb 2008 06:55:45
AM CST
Local ID
c4806f30-a6dc-43b0-8901-5531075795f7
Line Numbers
Raw Audit Messages
host=localhost type=AVC msg=audit(1204030545.936:22):
avc: denied { execstack } for pid=2959
comm="plugin-config"
scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
tclass=process
host=localhost type=SYSCALL
msg=audit(1204030545.936:22): arch=40000003
syscall=125 success=no exit=-13 a0=bfbc9000 a1=1000
a2=1000007 a3=fffff000 items=0 ppid=2957 pid=2959
auid=500 uid=500 gid=500 euid=0 suid=0 fsuid=0
egid=500 sgid=500 fsgid=500 tty=(none) ses=1
comm="plugin-config"
exe="/usr/lib/nspluginwrapper/plugin-config"
subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
key=(null)
**** end of nspluginwrapper ******
**** start of seamonkey setroubleshoot message ***
Summary:
SELinux is preventing seamonkey-bin from making the
program stack executable.
Detailed Description:
The seamonkey-bin application attempted to make its
stack executable. This is a
potential security problem. This should never ever be
necessary. Stack memory is
not executable on most OSes these days and this will
not change. Executable
stack memory is one of the biggest security problems.
An execstack error might
in fact be most likely raised by malicious code.
Applications are sometimes
coded incorrectly and request this permission. The
SELinux Memory Protection
Tests
(http://people.redhat.com/drepper/selinux-mem.html)
web page explains how
to remove this requirement. If seamonkey-bin does not
work and you need it to
work, you can configure SELinux temporarily to allow
this access until the
application is fixed. Please file a bug report
(http://bugzilla.redhat.com/bugzilla/enter_bug.cgi)
against this package.
Allowing Access:
Sometimes a library is accidentally marked with the
execstack flag, if you find
a library with this flag you can clear it with the
execstack -c LIBRARY_PATH.
Then retry your application. If the app continues to
not work, you can turn the
flag back on with execstack -s LIBRARY_PATH.
Otherwise, if you trust
seamonkey-bin to run correctly, you can change the
context of the executable to
unconfined_execmem_exec_t. "chcon -t
unconfined_execmem_exec_t
'/usr/lib/seamonkey-1.1.8/seamonkey-bin'" You must
also change the default file
context files on the system in order to preserve them
even on a full relabel.
"semanage fcontext -a -t unconfined_execmem_exec_t
'/usr/lib/seamonkey-1.1.8/seamonkey-bin'"
Fix Command:
chcon -t unconfined_execmem_exec_t
'/usr/lib/seamonkey-1.1.8/seamonkey-bin'
Additional Information:
Source Context
unconfined_u:unconfined_r:unconfined_t:SystemLow-
SystemHigh
Target Context
unconfined_u:unconfined_r:unconfined_t:SystemLow-
SystemHigh
Target Objects None [ process ]
Source firefox
Source Path
/usr/lib/firefox-3.0b3pre/firefox
Port <Unknown>
Host localhost
Source RPM Packages seamonkey-1.1.8-4.fc9
Target RPM Packages
Policy RPM
selinux-policy-3.3.0-1.fc9
Selinux Enabled True
Policy Type targeted
MLS Enabled True
Enforcing Mode Enforcing
Plugin Name allow_execstack
Host Name localhost
Platform Linux localhost
2.6.25-0.65.rc2.git7.fc9 #1 SMP
Sat Feb 23 23:06:09 EST
2008 i686 athlon
Alert Count 135
First Seen Fri 01 Feb 2008 05:08:54
PM CST
Last Seen Tue 26 Feb 2008 07:24:52
AM CST
Local ID
c4806f30-a6dc-43b0-8901-5531075795f7
Line Numbers
Raw Audit Messages
host=localhost type=AVC msg=audit(1204032292.58:34):
avc: denied { execstack } for pid=4524
comm="seamonkey-bin"
scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
tclass=process
host=localhost type=SYSCALL
msg=audit(1204032292.58:34): arch=40000003 syscall=125
success=no exit=-13 a0=bfa5e000 a1=1000 a2=1000007
a3=fffff000 items=0 ppid=1 pid=4524 auid=500 uid=500
gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500
fsgid=500 tty=(none) ses=1 comm="seamonkey-bin"
exe="/usr/lib/seamonkey-1.1.8/seamonkey-bin"
subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
key=(null)
***** end of seamonkey *****
____________________________________________________________________________________
Never miss a thing. Make Yahoo your home page.
http://www.yahoo.com/r/hs
16 years, 1 month
Can't switch consoles
by Jonathan Kamens
Don't think I saw anything on the list about this, sorry if I'm
remembering incorrectly. Don't see anything in bugzilla.
With today's rawhide, running the openchrome server, I can't switch to
VT 1 by hitting ctrl-alt-F1 from inside X. I'm fairly certain this used
to work. I have to run "sudo chvt 1" in a shell window.
16 years, 1 month
Today's rawhide fixes X login that was broken yesterday
by Bruno Wolff III
After updating to yesterday's rawhide I was unable to login using X.
After giving a login and password the session wouldn't be set up and the
greeter would restart.
I just git today's rawhide update applied on one machine and the problem
no longer appears.
16 years, 1 month
Triage meeting tomorrow - 2-27-2008
by Jon Stanley
Sorry for the late notice. There;s a triage meeting scheduled for
tomorrow - this is supposed to be our late week, however, the turnout
was not as good as previously on the last late attempt. And it's late
notice, so let's go for 17:00UTC (noon EST) tomorrow.
http://fedoraproject.org/wiki/BugZappers/Meetings/Agenda-2008-Feb-27
= Agenda for 2008-02-27 =
[[TableOfContents]]
== Logistics ==
* Date: Wednesday, February 27, 2008
* Time: 17:00UTC
* Location: #fedora-meeting on [http://freenode.net freenode]
== Current status ==
______ currently open Fedora bugs!
=== F7 and F8 ===
## reports can be gotten with script at
http://jstanley.fedorapeople.org/tools/ - there are currently three
files there, get_csv.sh, and url.byversion and url.rawhide - use
get_csv.sh with an argument of the filename containing the URL.
Append &Bugzilla_login=<login>&Bugzilla_password=<password> to the end
of the URL's there to get the reports in a wikified format
||Status / Version||7||8||
||ASSIGNED||434||534||
||FAILS_QA||0||1||
||MODIFIED||45||100||
||NEEDINFO||176||209||
||NEW||965||1480||
||ON_DEV||3||0||
||ON_QA||9||47||
||POST||4||4||
||RELEASE_PENDING||1||1||
||VERIFIED||6||3||
=== Rawhide since 2007-10-01 ===
||Status||Number of bugs||
||ASSIGNED||567||
||MODIFIED||74||
||NEEDINFO||79||
||NEW||1619||
||ON_QA||13||
||POST||1||
||VERIFIED||2||
== Unresolved Topics and Followup From Previous Meetings ==
Check with individual owners for current status.
||<tableclass="message notice">If owner is not present, roll issue
foward to next meeting. Otherwise reflect action or decision in
minutes for the current meeting.||
* Training slide deck
* Status on GCC 4.3 triage
== New Topics ==
=== MUST be discussed/resolved this week ===
* Backlog proposal - [:JohnPoelstra/BugzillaExtremeMakeOver:] and
[:BugZappers/HouseKeeping:] - DRAFT proposals
16 years, 1 month