adobe on FC 14

adobe on FC 14

[Bill Chimiak]

acroread wants to execute on a stack and it seems to be ugly.
Any advice?
Details:

/opt/Adobe/Reader9/Reader/intellinux/bin/acroread: error while loading shared 
libraries: libcrypto.so.0.9.8: cannot enable executable stack as shared object 
requires: Permission denied

audit2allow says:
#============= setroubleshootd_t ==============
allow setroubleshootd_t user_home_t:file { execute execute_no_trans };

#============= unconfined_t ==============
#!!!! This avc can be allowed using the boolean 'allow_execstack'
allow unconfined_t self:process execstack;

===============================================
Someone suggested this:

chcon -t execmem_exec_t '/opt/Adobe/Reader9/Reader/intellinux/bin/acroread'

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: adobe on FC 14

[Stephen Smalley]

On Thu, 2011-02-24 at 11:19 -0500, Bill Chimiak wrote:
> acroread wants to execute on a stack and it seems to be ugly.
> Any advice?
> Details:
> 
> /opt/Adobe/Reader9/Reader/intellinux/bin/acroread: error while loading shared 
> libraries: libcrypto.so.0.9.8: cannot enable executable stack as shared object 
> requires: Permission denied

I have no libcrypto.so.0.9.8 on F14.
Where is yours located?
$ locate libcrypto.so.0.9.8

Replace /path/to/libcrypto.so.0.9.8 with the actual path below.

What package owns it?
$ rpm -q -f /path/to/libcrypto.so.0.9.8

Is it marked as requiring an executable stack?
$ execstack -q /path/to/libcrypto.so.0.9.8

Try clearing the marking.
$ execstack -c /path/to/libcrypto.so.0.9.8

-- 
Stephen Smalley
National Security Agency


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.