Fedora 10 Selinux Denies Firefox Ability to Upload Picture
Daniel J Walsh
dwalsh at redhat.com
Tue Jan 20 16:06:30 UTC 2009
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Serge E. Hallyn wrote:
> Quoting Ole Ersoy (ole.ersoy at gmail.com):
>>> Are you running with nsplugin_t? ps -eZ | grep nsplugin
>> [root at ole Download]# ps -eZ | grep nsplugin
>> [root at ole Download]#
>>
>>> What file system are you using?
>> ext3
>>
>>> What is the exact behaviour that is being blocked?
>> I tried uploading a photo to facebook, and kept getting a "one
>> sentence" postback from facebook saying the image could not be
>
> Interesting.
>
> Another thing to consider is that facebook (or someone else)
> might have been trying to do something other than get that
> picture, and selinux rightfully stopped it.
>
>> uploaded. I tried it 3-4 times, just to make sure it was not a
>> temporary thing on their side. Then I ran setenforce 0, and the image
>> uploaded fine. So I assumed selinux was blocking firefox from reading
>> the image. I've been trying to duplicate the result with SELinux
>> enforcing though, after rebooting, and now I can upload images without
>> a problem, so I'm wondering whether it was just a coincidence that
>> setenforce 0 worked. If no one else has the problem, then it's
>> probably just a coincidence. I have a better idea on how to isolate
>> the message in the log now, so if it happens again, I'll hopefully be
>> able to get a better grasp on why.
>>
>> Thanks,
>> - Ole
>>
>> --
>> fedora-selinux-list mailing list
>> fedora-selinux-list at redhat.com
>> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
Ok, if it happens again, don't hesitate to ping me.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org
iEYEARECAAYFAkl19oUACgkQrlYvE4MpobMqtQCfcMLys63o2TBh5ITnHFlE0WC3
Fr4AniDElQN84WBH9W2MZWH9fxguDPfS
=LlkN
-----END PGP SIGNATURE-----
More information about the selinux
mailing list