On Mon, 2006-04-24 at 14:26 -0400, Claude Jones wrote: > On Mon April 24 2006 13:06, Paul Howarth wrote: > > The "lib_t" on each line above should have been > > "textrel_shlib_t". You definitely did the "restorecon -Rv > > /usr/lib/ati-fglrx" after the semanage? > > > > yes > > > > > Try manually setting context for starters: > > # chcon -h -t textrel_shlib_t /usr/lib/ati-fglrx/* > > # ls -lZ /usr/lib/ati-fglrx > > > > If you then do setenforce 1, does it work? > > > > yes, that worked > > > If so, let's try fixing the default context. > > Can you post the output of: > > # semanage fcontext -l | grep ati-fglrx > > # semanage fcontext -l | grep ati-fglrx > /usr/lib(64)?/ati-fglrx/.*\.so(\..*)? regular file > system_u:object_r:textrel_shlib_t:s0 > > What's that "(64)" doing in there? This is definitely not a 64 > system... It's a regex, so "lib(64)?" means '"lib" or "lib64"'. So we've established that the context of shared ibjects in /usr/lib/ati-fglrx needs to be textrel_shlib_t; we just need to figure out why the "restorecon" didn't work. Having changed the contexts manually, what happens if you do: # restorecon -Rv /usr/lib/ati-fglrx Does everything get changed back to lib_t? (use ls -lZ /usr/lib/ati-fglrx to see). Paul.
