On Wednesday August 02 2006 7:35 pm, Claude Jones wrote:
Paul: On further experimenting this evening, I find that I had things all
wrong - see below
> On Wed August 2 2006 2:17 pm, Paul Howarth wrote:
> > Perhaps you have auditd running (this was the default on FC4).
> > If so, the AVC messages will be in /var/log/audit/audit.log
>
> I do, and I found that just before I left home this am.
> I'll poke around those avc messages when I get back.
I've looked through the audit messages. The ones that raise alarms mostly seem
to pertain to kio operations related to images embedded in emails. Nothing
there to indicate any issues with my two programs. Here's an example:
type=AVC msg=audit(1154571140.444:1802): avc: denied { associate } for
pid=8552 comm="kio_http"
name="www.corasworks.net_graphics_EmailTemplates_BlueEmailOriginalVersion_whitepaper.gif_6ffce860.new"
scontext=user_u:object_r:unlabeled_t:s0 tcontext=system_u:o>
>
> > > Jahshaka produces this
> > > on the cli:
> > >
> > > # jahshaka
> > > jahshaka.bin: error while loading shared libraries:
> > > libGL.so.1: cannot enable executable stack as shared object
> > > requires: Permission denied
> >
> > If you know which libGL.so.1 this is, you could try:
> >
> > # execstack -c /path/to/libGL.so.1
>
> OK - I'll give that a try, too - come to think about it, that's a
> lib that gave me some trouble a few days back...I'm going to
> have to revisit that, and remember what it was about, and what
> the fix was...
>
A few days ago, there was an issue with new ATI drivers borking libGL - it's
referred to here: http://tinyurl.com/mnx8o
That's what I was trying to remember. That fix cured my ATI problem, but
that's on my machine at work - this box has an NVidia card, so scratch that
theory...
By the way, I can't repeat that libGL.so.1 error this evening - as user if I
run jahshaka tonight, I get:
$ jahshaka
QObject::connect: No such signal FigureEditor::updateFrameOffset(assetData)
QObject::connect: (sender name: 'unnamed')
QObject::connect: (receiver name: 'unnamed')
and if I switch to root, it runs, and the cli output is:
$ su -$ su -
Password:
[root@tehogee ~]# jahshaka
QObject::connect: No such signal FigureEditor::updateFrameOffset(assetData)
QObject::connect: (sender name: 'unnamed')
QObject::connect: (receiver name: 'unnamed')
QWidget::setMinimumSize: The smallest allowed size is (0,0)
QWidget::setMinimumSize: The smallest allowed size is (0,0)
QWidget::setMinimumSize: The smallest allowed size is (0,0)
QObject::connect: No such slot JahControl::slotSaveSceneAs()
QObject::connect: (sender name: 'unnamed')
QObject::connect: (receiver name: 'unnamed')
QObject::connect: No such slot JahControl::SceneAppendScene()
QObject::connect: (sender name: 'unnamed')
QObject::connect: (receiver name: 'unnamed')
QObject::connect: No such slot JahControl::ExportMedia()
QObject::connect: (sender name: 'unnamed')
QObject::connect: (receiver name: 'unnamed')
QObject::connect: No such slot JahControl::PackageSaveScene()
QObject::connect: (sender name: 'unnamed')
QObject::connect: (receiver name: 'unnamed')
Password:
[root@tehogee ~]# jahshaka
QObject::connect: No such signal FigureEditor::updateFrameOffset(assetData)
QObject::connect: (sender name: 'unnamed')
QObject::connect: (receiver name: 'unnamed')
QWidget::setMinimumSize: The smallest allowed size is (0,0)
QWidget::setMinimumSize: The smallest allowed size is (0,0)
QWidget::setMinimumSize: The smallest allowed size is (0,0)
QObject::connect: No such slot JahControl::slotSaveSceneAs()
QObject::connect: (sender name: 'unnamed')
QObject::connect: (receiver name: 'unnamed')
QObject::connect: No such slot JahControl::SceneAppendScene()
QObject::connect: (sender name: 'unnamed')
QObject::connect: (receiver name: 'unnamed')
QObject::connect: No such slot JahControl::ExportMedia()
QObject::connect: (sender name: 'unnamed')
QObject::connect: (receiver name: 'unnamed')
QObject::connect: No such slot JahControl::PackageSaveScene()
QObject::connect: (sender name: 'unnamed')
QObject::connect: (receiver name: 'unnamed')
Doesn't seem like a selinux issue to me - do you agree?
> > > If I setenforce 1, neither program runs - right about that
> > > time, I get the following in /var/log/messages:
> > >
> > > Aug 1 23:02:39 tehogee automount[15231]: >>
> > > /usr/sbin/showmount: can't get address for .directory
> > > Aug 1 23:02:39 tehogee automount[15231]: lookup(program):
> > > lookup for .directory failed
> > > Aug 1 23:02:39 tehogee automount[15231]: failed to mount
> > > /net/.directory
> > >
> > > Those get repeated about 8 times.
> >
> > Might not be related. We'll see. See if you can find any
> > type=AVC messages in /var/log/audit/audit.log.
This turns out to not be true - PPRacer is running just fine this evening with
setenforce 1 - Jahshaka only runs as root, and that has nothing to do with
whether selinux is enforcing or not -
bottom line - sorry for the noise
--
Claude Jones
Brunswick, MD, USA
