relabeling of libjava plugin (j2sdk_1_5_0)

Tom London selinux at comcast.net
Thu May 27 01:06:19 UTC 2004


I've installed j2sdk_1_5_0 following the usual Fedora instruction. The 
only adder is that the mozilla plugin needs its context 'fixed'. Here's 
what I do:
     cd /usr/lib/mozilla/plugins
     chcon --reference moz* libjava*
     chcon -h --reference moz* libjava*      (not sure this is needed)
(/usr/lib/mozilla/plugins/libjava* is a symbolic link to 
/usr/java/j2sdk1.5.0/jre/plugin/i386/ns7/libjavaplugin_oji.so).

That seems to make the plugin work.

After yum updating some packages, I ran 'fixfiles relabel' and found 
that it undid the context change above. Here are the log entries:
     /usr/sbin/setfiles:  relabeling 
/usr/lib/mozilla/plugins/libjavaplugin_oji.so from 
system_u:object_r:shlib_t to system_u:object_r:lib_t
    /usr/sbin/setfiles:  relabeling 
/usr/java/j2sdk1.5.0/jre/plugin/i386/ns7/libjavaplugin_oji.so from 
system_u:object_r:shlib_t to system_u:object_r:usr_t

After this, the java-vm plugin stops working (that is, web pages with 
x-java-vm items no longer work).  I run the chcon's again and all works.

Does src/policy/file_contexts/types.fc need a line for it?
(e.g., /usr/java/j2sdk.*/jre/plugin/i386(/.*)?/lib.*\.so.* -- 
system_u:object_r:shlib_t)

thanks,
   tom




More information about the fedora-selinux-list mailing list