FC6, after x264 update, mplayer won't start

gnjunior · 11-04-2006, 03:38 PM

Hi,

After this update, three days ago:

Code:

x264-0-0.7.20061028.lvn6.i386.rpm

mplayer didn't start:

Code:

mplayer: error while loading shared libraries: 
/usr/lib/libx264.so.54: cannot restore segment prot after reloc: Permission denied

It plays only if I disable Selinux.

Code:

[root@localhost ~]# ls -l -Z /usr/lib/libx264.so.54
-rw-r--r--  root root system_u:object_r:lib_t:s0       /usr/lib/libx264.so.54
[root@localhost ~]# ls -l /usr/lib/libx264.so.54
-rw-r--r-- 1 root root 558760 Nov  1 12:14 /usr/lib/libx264.so.54

As you see it's not executable, but it's working whitout Selinux.
I would like to get selinux back, what's wrong, what can I do to fix?

Thanks for reading

gnjunior · 11-04-2006, 04:15 PM

OK found a way:
http://forums.fedoraforum.org/showthread.php?t=134983

Thanks

macemoneta · 11-04-2006, 04:17 PM

If you can post the actual AVC message from /var/log/messages, it would be helpful. I suspect the the x264 library has the wrong context. You can try:

chcon -t texrel_shlib_t /usr/lib/libx264.so.54

gnjunior · 11-04-2006, 04:41 PM

Quote:

Originally Posted by macemoneta

If you can post the actual AVC message from /var/log/messages, it would be helpful. I suspect the the x264 library has the wrong context. You can try:

chcon -t texrel_shlib_t /usr/lib/libx264.so.54

Hi,

Thanks for your reply. I did what you said and it's working fine now.
That's the log before:

Code:

audit(1162678343.622:79): avc:  denied  { execmod } for  pid=2558 comm="amarokapp" name="libx264.so.54" dev=dm-0 ino=4037802 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
audit(1162678354.210:80): avc:  denied  { execmod } for  pid=2670 comm="mplayer" name="libx264.so.54" dev=dm-0 ino=4037802 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
audit(1162678467.589:81): bool=allow_execmod val=1 old_val=0 auid=4294967295
audit(1162678468.001:82): avc:  denied  { write } for  pid=2705 comm="setfiles" name="[18383]" dev=pipefs ino=18383 scontext=system_u:system_r:setfiles_t:s0 tcontext=system_u:system_r:unconfined_t:s0 tclass=fifo_file
audit(1162678468.001:83): avc:  denied  { write } for  pid=2705 comm="setfiles" name="[18383]" dev=pipefs ino=18383 scontext=system_u:system_r:setfiles_t:s0 tcontext=system_u:system_r:unconfined_t:s0 tclass=fifo_file
audit(1162679343.924:84): bool=allow_execmod val=0 old_val=1 auid=4294967295
audit(1162679344.472:85): avc:  denied  { write } for  pid=3131 comm="setfiles" name="[19910]" dev=pipefs ino=19910 scontext=system_u:system_r:setfiles_t:s0 tcontext=system_u:system_r:unconfined_t:s0 tclass=fifo_file
audit(1162679344.472:86): avc:  denied  { write } for  pid=3131 comm="setfiles" name="[19910]" dev=pipefs ino=19910 scontext=system_u:system_r:setfiles_t:s0 tcontext=system_u:system_r:unconfined_t:s0 tclass=fifo_file
audit(1162679358.601:87): avc:  denied  { execmod } for  pid=3139 comm="mplayer" name="libx264.so.54" dev=dm-0 ino=4037802 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file

After a reboot no more log

Thanks this solution is less permisive.

macemoneta · 11-04-2006, 04:48 PM

I'm glad to hear it worked. If you have a few minutes, you should report the problem to the repository maintainer where you got the x264 package, so they can correct the package. Otherwise, the next update will break it again.

gnjunior · 11-04-2006, 04:58 PM

Quote:

Originally Posted by macemoneta

I'm glad to hear it worked. If you have a few minutes, you should report the problem to the repository maintainer where you got the x264 package, so they can correct the package. Otherwise, the next update will break it again.

It's livna, I never filed a report before(useally I'm the trouble), but I'll see what I can do.

Thanks again