relabeling of libjava plugin (j2sdk_1_5_0)
Tom London
selinux at comcast.net
Thu May 27 01:06:19 UTC 2004
I've installed j2sdk_1_5_0 following the usual Fedora instruction. The
only adder is that the mozilla plugin needs its context 'fixed'. Here's
what I do:
cd /usr/lib/mozilla/plugins
chcon --reference moz* libjava*
chcon -h --reference moz* libjava* (not sure this is needed)
(/usr/lib/mozilla/plugins/libjava* is a symbolic link to
/usr/java/j2sdk1.5.0/jre/plugin/i386/ns7/libjavaplugin_oji.so).
That seems to make the plugin work.
After yum updating some packages, I ran 'fixfiles relabel' and found
that it undid the context change above. Here are the log entries:
/usr/sbin/setfiles: relabeling
/usr/lib/mozilla/plugins/libjavaplugin_oji.so from
system_u:object_r:shlib_t to system_u:object_r:lib_t
/usr/sbin/setfiles: relabeling
/usr/java/j2sdk1.5.0/jre/plugin/i386/ns7/libjavaplugin_oji.so from
system_u:object_r:shlib_t to system_u:object_r:usr_t
After this, the java-vm plugin stops working (that is, web pages with
x-java-vm items no longer work). I run the chcon's again and all works.
Does src/policy/file_contexts/types.fc need a line for it?
(e.g., /usr/java/j2sdk.*/jre/plugin/i386(/.*)?/lib.*\.so.* --
system_u:object_r:shlib_t)
thanks,
tom
More information about the fedora-selinux-list
mailing list