Selinux attacks acroread again

[Gérard Milmeister]

On Thu, 2006-04-13 at 10:08 +0100, Paul Smith wrote:
> On 4/12/06, Paul Smith <phhs80 at gmail.com> wrote:
> > After the today's updates, I tried the following to get acroread
> > working, but it exits with 1:
> >
> > # chcon -t texrel_shlib_t
> > /usr/local/Adobe/Acrobat7.0/Reader/intellinux/lib/libJP2K.so
> > # chcon -t textrel_shlib_t
> > /usr/local/Adobe/Acrobat7.0/Reader/intellinux/lib/libCoolType.so
> >
> > Any ideas?
> 
> Do others confirm the same problem?
Evertime you install a new acroread or relabel the filesystem (
which happens when the selinux policy is updated) the context
changes a reset to default. To avoid this you must change
policy by the following:
/usr/sbin/semanage fcontext -a -t textrel_shlib_t
'/usr/local/Adobe/Acrobat7.0/Browser/intellinux/.*\.so'
/usr/sbin/semanage fcontext -a -t textrel_shlib_t
'/usr/local/Adobe/Acrobat7.0/Reader/intellinux/SPPlugins/.*\.apl'
/usr/sbin/semanage fcontext -a -t textrel_shlib_t
'/usr/local/Adobe/Acrobat7.0/Reader/intellinux/plug_ins/.*\.api'
Then you do:
restorecon -R /usr/local/Adobe/Acrobat7.0
This should take care of the problem. It is really a FAQ and
should be mentioned somewhere on the Fedora Wiki.
-- 
Gérard Milmeister
Langackerstrasse 49
CH-8057 Zürich