xpra icon
Bug tracker and wiki

This bug tracker and wiki are being discontinued
please use https://github.com/Xpra-org/xpra instead.

Opened 9 years ago

Closed 8 years ago

Last modified 17 months ago

#284 closed task (fixed)

selinux labelling of static codec builds

Reported by: Antoine Martin Owned by: Antoine Martin
Priority: critical Milestone: 0.9
Component: packaging Version: trunk
Keywords: Cc:


On some distros (ie: CentOS 5.x), the static codec builds will not load without:

chcon -t texrel_shlib_t lib.so /path/to/codec.so

Otherwise we get a:

cannot restore segment prot after reloc

We should be able to do this as an rpm post installation scriptlet I think.

Change History (5)

comment:1 Changed 9 years ago by Antoine Martin

Resolution: fixed
Status: newclosed

fixed in r2902 - seems to work on CentOS 5.9

comment:2 Changed 8 years ago by Antoine Martin

Priority: majorcritical
Resolution: fixed
Status: closedreopened

As per SELinux Reveals Bugs in other code: chcon won't survive a relabel!

We also need:

semanage fcontext -a -t texrel_shlib_t /path/to/codec.so

Note: texrel_shlib_t is an alias for textrel_shlib_t, I believe it is safer to use the former with older distros like centos5.

Last edited 8 years ago by Antoine Martin (previous) (diff)

comment:3 Changed 8 years ago by Antoine Martin

Resolution: fixed
Status: reopenedclosed

Applied semanage change in r7008, also needed to use textrel_shlib_t (r7009: with a t) for compatibility with newer policies, and added dependency on policycoreutils-python (policycoreutils for centos5 in r7010). Backport for all of this in r7011.

Tested with beta packages, the library label survived a system relabel.

This will be a non-issue with #613 as we will no longer use static modules.

Closing, feel free to re-open if I've missed something.

comment:4 Changed 7 years ago by Antoine Martin

Note: the ticket for the xpra selinux policy is #815.

comment:5 Changed 17 months ago by migration script

this ticket has been moved to: https://github.com/Xpra-org/xpra/issues/284

Note: See TracTickets for help on using tickets.