FC5, selinux and acroread

[Arthur Pemberton]

On 4/23/06, Gene Heskett <gene.heskett at verizon.net> wrote:
> Greetings;
>
> Let me phrase this differently this time.
>
> Selinux is, when in the enforcing mode, denying acrobat to run,
> returning this error:
>
> Apr 23 05:11:10 diablo kernel: audit(1145783470.557:3): avc:  denied
> { execmod } for  pid=2354 comm="acroread" name="libJP2K.so" dev=hda5
> ino=9886986 scontext=root:system_r:unconfined_t:s0-s0:c0.c255
> tcontext=system_u:object_r:lib_t:s0 tclass=file
> Apr 23 05:12:02 diablo kernel: audit(1145783522.332:4): avc:  denied
> { execmod } for  pid=2391 comm="firefox-bin" name="nppdf.so" dev=hda5
> ino=9821380 scontext=root:system_r:unconfined_t:s0-s0:c0.c255
> tcontext=root:object_r:lib_t:s0 tclass=file
>
> However, set it for permissive & reboot, and all is happy.
>
> So how do we go about clearing acrobats ability to run with selinux when
> it is in the enforcing mode?

I believe this may help: http://fedora.redhat.com/docs/selinux-faq-fc5/

It has helped me in the past, but that was some time ago in FC3.

--
As a boy I jumped through Windows, as a man I play with Penguins.