I downloaded an istealer but i never ran it, i just renamed it and uploaded it again. Then i ran a clamav scan and it found a trojan.spy in my cache folder of firefox. I removed the trojan.spy but i am having a new problem which might or might not be related to that.

A selinux security alert pops up every time i try to open something with totem-player.

The source process is totem-video-thumbnailer and attempted this access is execstack.

What should i do?

here's the output if i run totem in terminal:

(gst-plugin-scanner:3368): GStreamer-WARNING **: Failed to load plugin '/usr/lib/gstreamer-0.10/libgstxvid.so': libxvidcore.so.4: cannot enable executable stack as shared object requires: Permission denied

(gst-plugin-scanner:3368): GStreamer-WARNING **: Failed to load plugin '/usr/lib/gstreamer-0.10/libgstpostproc.so': libxvidcore.so.4: cannot enable executable stack as shared object requires: Permission denied

(gst-plugin-scanner:3368): GStreamer-WARNING **: Failed to load plugin '/usr/lib/gstreamer-0.10/libgstffmpeg.so': libxvidcore.so.4: cannot enable executable stack as shared object requires: Permission denied

(totem:3367): Totem-WARNING **: Failed to create dbus proxy for org.gnome.SettingsDaemon: Could not get owner of name 'org.gnome.SettingsDaemon': no such name
** Message: pygobject_register_sinkfunc is deprecated (GstObject)

You WHAT?


Not related as it is a Windows application (password stealer) so running it in Linux natively is impossible. However you having downloaded it means either you were tricked into downloading it (be more careful) or you actively searched for it (go play with your desktop settings instead).


Dan Walsh's web log: SELinux Reveals Bugs in other code and Ulrich Drepper's SELinux Memory Protection Tests why execstack is a Bad Thing, see your /var/log/audit/audit.log or /var/log/messages for exact messages to run through 'audit2allow' to confirm and for instance bug 666023 for clues (as in running 'execstack -c /path/to/library').