update breaks sandbox functionality

Daniel J Walsh dwalsh at redhat.com
Fri Sep 6 15:32:45 UTC 2013


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 09/06/2013 07:15 AM, fedorauser wrote:
> Hi,
> 
> FYI:
> 
> yesterday a few new updates came in via updates-testing: 
> policycoreutils-2.1.14-46.5.fc19.x86_64 
> policycoreutils-python-2.1.14-46.5.fc19.x86_64 
> policycoreutils-sandbox-2.1.14-46.5.fc19.x86_64
> 
> Since I installed them sandbox functionality (e.g. "sandbox -X -t
> sandbox_web_t firefox") stopped working (no window would show up).
> 
> Downgrading these packages results in a working setup again:
> 
> yum downgrade policycoreutils policycoreutils-python 
> policycoreutils-sandbox
> 
> I didn't look into any audit logs but I might be able to do that with my
> testing VM later.
> 
That is strange since sandbox was not touched in that update. Can you update a
gain and see if it works this time.

Can you check seunshares protection after the update?  If after the update it
does not work, could you try chmod 4755 /usr/sbin/seunshare and see if it works?

> -------------------------------------------------
> 
> VFEmail.net - http://www.vfemail.net $14.95 ONETIME Lifetime accounts with
> Privacy Features! 15GB disk! No bandwidth quotas! Commercial and Bulk Mail
> Options! -- selinux mailing list selinux at lists.fedoraproject.org 
> https://admin.fedoraproject.org/mailman/listinfo/selinux
> 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlIp9Z0ACgkQrlYvE4MpobNkSwCg1anYzL71CU5sHT1bciOpNKua
MwAAn0bkJvR2eA4ENm4BFGV+z+YYnzki
=tIJs
-----END PGP SIGNATURE-----


More information about the selinux mailing list