flash-plugin-10.1.82.76 not working within SELinux sandbox

Daniel J Walsh dwalsh at redhat.com
Thu Aug 12 16:01:18 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 08/12/2010 08:18 AM, Christoph A. wrote:
> On 08/12/2010 03:07 PM, nux at li.nux.ro wrote:
>> Christoph A. writes:
>>
>>> On 08/12/2010 02:43 AM, Wolfgang S. Rupprecht wrote:
>>>>
>>>> "Christoph A." <casmls at gmail.com> writes:
>>>>> It seams that this didn't fix it entirely - in some cases it doesn't
>>>>> work again...
>>>>> I'll have to dig deeper..
>>>>
>>>> Try just copying it.  If the mozilla does a chroot the symlink may be
>>>> outside of what it can access.
>>>
>>> I copied it to
>>> /usr/lib/mozilla/plugins
>>> and
>>> /usr/lib64/mozilla/plugins
>>> but it didn't resolve the problem.
>>>
>>> The interesting thing is, that it still works without the sandbox if I
>>> remove the plugin from both locations..
> 
> Sorry, I have to revise that, I didn't restart firefox after removing
> it. It didn't work after restarting firefox (= expected behavior).
> 
> So the right location is /usr/lib64/mozilla/plugins
> but somehow firefox running in a sandbox doesn't get that..?
> 
> Kind regards,
> Christoph
> 
> 

Not sure what is causing the problem, but I would try to run restorecon
on the directory

restorecon -R -v /usr/lib64 /usr/lib

If sandbox still does not work, then run

# semodule -DB

To turn off dontaudit rules
Then try sandbox.

send me the avcs.

# semodule -B

Will turn the rules back on.


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkxkGs4ACgkQrlYvE4MpobNcrQCgmGW72ViinETyEcLcFap2BDHc
8YoAoNmdg6IiSvKmQJgXmMM2BW0RLKYh
=NqFZ
-----END PGP SIGNATURE-----


More information about the users mailing list