selinux X libxklavier recompilation

[Jiri Cerny]

As the last version of libxklavier in rawhide has bug  that makes the
layout-options tab in gnome-keyboard-preferences completely useless, I
decided to recompile libxklavier. (The bug is already in bugzila and is
fixed in upstream CVS)

I downloaded the last libxklavier SRPM, added a one-line patch from
upstream CVS to it, did rpmbuild -bb libxklavier.spec and installed the new rpm
package. Now, when starting gnome-keyboard-preferencies I get errors like

gnome-keyboard-properties: error while loading shared libraries:
/usr/lib/libxklavier.so.10: cannot restore segment prot after reloc:
Permission denied

and in /var/log/audit/audit.log I have

type=AVC msg=audit(1138888218.846:68): avc:  denied  { execmod } for
pid=9342 comm="gnome-keyboard-" name="libxklavier.so.10.0.0" 
dev=sda8 ino=585293
scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0
tclass=file 

type=SYSCALL msg=audit(1138888218.846:68): arch=40000003 syscall=125
success=no exit=-13 a0=160000 a1=15000 a2=5 a3=bf8e16a0 items=0 pid=9342
auid=4294967295 uid=501 gid=501 euid=501 suid=501 fsuid=501 egid=501 sgid=501 fsgid=501
comm="gnome-keyboard-" exe="/usr/bin/gnome-keyboard-properties"
type=AVC_PATH msg=audit(1138888218.846:68):
path="/usr/lib/libxklavier.so.10.0.0"

Problem disappears after setenforce 0. The system is fc5t2 with  uptodate
rawhide updates. 

Can somebody explain me what is going wrong. Such trivial recompilations of
SRPMS usually worked without problem for me. 

	Jiri

-- 
Jiří Černý
École Polytechnique Féderale de Lausanne (EPFL)
Chair of Stochastic modeling (CMOS)
INR 031 - Station 14
CH-1015 Lausanne
 
phone:      ++41-21-693 7534
fax:        ++41-21-693 7545
e-mail:     jiri.cerny at epfl.ch