Selinux attacks acroread again

[Paul Howarth]

Paul Smith wrote:
> On 4/13/06, Paul Howarth <paul at city-fan.org> wrote:
>>> Thanks, Gérard, but getting:
>>>
>>> # restorecon -R /usr/local/Adobe/Acrobat7.0
>>> bash: restorecon: command not found
>>> # /usr/sbin/restorecon -R /usr/local/Adobe/Acrobat7.0
>>> bash: /usr/sbin/restorecon: No such file or directory
>>> #
>> It's in /sbin
>>
>> Use "su -" rather than "su" and you'll get root's environment, which
>> will include having /sbin and /usr/sbin on the PATH.
> 
> Thanks, Paul. Done so and subsequently:
> 
> # chcon -t texrel_shlib_t
> /usr/local/Adobe/Acrobat7.0/Reader/intellinux/lib/libJP2K.so
> # chcon -t texrel_shlib_t
> /usr/local/Adobe/Acrobat7.0/Reader/intellinux/lib/libCoolType.so
> 
> Acroread shows up, but reporting errors while loading a bunch of
> plugins. Any ideas?

Did you do:

/usr/sbin/semanage fcontext -a -t textrel_shlib_t \
'/usr/local/Adobe/Acrobat7.0/Reader/intellinux/SPPlugins/.*\.apl'

/usr/sbin/semanage fcontext -a -t textrel_shlib_t \
'/usr/local/Adobe/Acrobat7.0/Reader/intellinux/plug_ins/.*\.api'

before the restorecon?

What's the output of:

$ ls -lZ /usr/local/Adobe/Acrobat7.0/Reader/intellinux/*/*.ap*

Paul.