On Sun, Apr 23, 2006 at 06:27:46AM -0400, Gene Heskett wrote:
> Greetings;
>
> Let me phrase this differently this time.
>
> Selinux is, when in the enforcing mode, denying acrobat to run,
> returning this error:
>
> Apr 23 05:11:10 diablo kernel: audit(1145783470.557:3): avc: denied
> { execmod } for pid=2354 comm="acroread" name="libJP2K.so" dev=hda5
> ino=9886986 scontext=root:system_r:unconfined_t:s0-s0:c0.c255
> tcontext=system_u:object_r:lib_t:s0 tclass=file
> Apr 23 05:12:02 diablo kernel: audit(1145783522.332:4): avc: denied
> { execmod } for pid=2391 comm="firefox-bin" name="nppdf.so" dev=hda5
> ino=9821380 scontext=root:system_r:unconfined_t:s0-s0:c0.c255
> tcontext=root:object_r:lib_t:s0 tclass=file
>
> However, set it for permissive & reboot, and all is happy.
>
> So how do we go about clearing acrobats ability to run with selinux when
> it is in the enforcing mode?
>
Excerpt from the list itself. Forgot which thread though:
---------------------------------------------------------------------
>
> That's it, SELinux is behind the problem. Only I like to keep SELinux
> enforcing-mode activ and at the same time I need AdobeReader. Anything
to solve
> that conflict?
Hi, I have done 2 things to fix it:
$ chcon -t
textrel_shlib_t /usr/local/Adobe/Acrobat7.0/Reader/intellinux/lib/*.so
and then
$ chcon -t
textrel_shlib_t
/usr/local/Adobe/Acrobat7.0/Reader/intellinux/plug_ins/*.api
That fixed the problem for me.
Reinhard
>
> Bengt
>
---------------------------------------------------------------------
HTH!
--
vikram...
||||||||
||||||||
^^'''''^^||root||^^^'''''''^^
// \\ ))
//(( \\// \\
// /\\ || \\
|| / )) (( \\
--
I'm continually AMAZED at th'breathtaking effects of WIND EROSION!!
--
#
~|~
=
Registered Linux User #285795
