Fixing SELinux problems on Fedora Core 5

3 views
Skip to first unread message

NZhe...@gmail.com

unread,
May 26, 2006, 7:16:22 PM5/26/06
to Google-Labs-Picasa-for-Linux
Fedora core 5 SElinux policy selinux-policy-targeted contains a guard
module called {execmod} which conflicts with a few third party
software packages. See

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=190657

If launch picasa and look in /var/log/messages you will see a heap of
"kernel: audit(...): avc: denied { execmod }" warnings.

The solution so far has been to wire in execeptions into new rollouts
of selinux-policy-targeted for known third party packages such as
realplayer and adobe acroread.

You can use the foilowing workaround to get picasa working on FC5

# As Root
> su -
# Set the executable module exception on *.so *.so.* and *.dll files
> find /opt/picasa -type f -iname '*.so' -o -iname '*.so.*' -o -iname '*.dll' -exec chcon -t textrel_shlib_t {} \;

See Dan Walsh's blog for details...
http://danwalsh.livejournal.com/6117.html

Reply all
Reply to author
Forward
Message has been deleted
0 new messages