20090706 の ISO だけど・・・
[lugia@lugia-castle Music]$ mplayer -ao alsa Gake*.ogg mplayer: error while loading shared libraries: /usr/lib/libcdda_paranoia.so.0: cannot restore segment prot after reloc: Permission denied [lugia@lugia-castle Music]$ ll /usr/lib/libcdda_paranoia.so.0 lrwxrwxrwx. 1 root root 25 2009-07-06 22:29 /usr/lib/libcdda_paranoia.so.0 -> libcdda_paranoia.so.0.9.8 [lugia@lugia-castle Music]$ ll /usr/lib/libcdda_paranoia.so.0.9.8 -rw-r--r--. 1 root root 30068 2009-06-30 04:01 /usr/lib/libcdda_paranoia.so.0.9.8 [lugia@lugia-castle Music]$
cdda_paranoia って CD プレーヤーか・・・
http://ppwww.phys.sci.kobe-u.ac.jp/~akusumoto/linux/detail.php?d=config/selinux/chcon
SELinux なのかね?
$ ls -lZ /usr/lib/libcdda_paranoia.so.0.9.8 -rw-r--r--. root root system_u:object_r:lib_t:s0 /usr/lib/libcdda_paranoia.so.0.9.8
Momonga は lib_t じゃないのか?
type=AVC msg=audit(1247215424.027:151): avc: denied { execmod } for pid=7511 comm="mplayer" path="/usr/lib/libcdda_paranoia.so.0.9.8" dev=sda7 ino=20212 scontext=unconfined_u:unconfined_r:unconfined_execmem_t:s0-s0:c0.c1023 tcontext=system_u:object_r:lib_t:s0 tclass=file
Was caused by:
The boolean allow_execmod was set incorrectly.
Description:
Allow all unconfined executables to use libraries requiring text relocation that are not labeled textrel_shlib_t")
Allow access by executing:
# setsebool -P allow_execmod 1だって。これは手元で許可するか shlib_t にするかして直せばいいのかね? それとも・・・
[root@lugia-castle ~]# ls -lZ /usr/lib | grep lib_t | grep -v "^d" | grep -v "^l" | more (前略) -rwxr-xr-x. root root system_u:object_r:lib_t:s0 libasyncns.so.0.3.1 -rwxr-xr-x. root root system_u:object_r:lib_t:s0 libatk-1.0.so.0.2609.1 -rwxr-xr-x. root root system_u:object_r:lib_t:s0 libatkmm-1.6.so.1.0.30 -rwxr-xr-x. root root system_u:object_r:lib_t:s0 libatksharpglue-2.so -rwxr-xr-x. root root system_u:object_r:lib_t:s0 libaudclient.so.1.0.0 -rwxr-xr-x. root root system_u:object_r:lib_t:s0 libaudid3tag.so.1.0.0 -rwxr-xr-x. root root system_u:object_r:lib_t:s0 libaudio.so.2.4 -rwxr-xr-x. root root system_u:object_r:lib_t:s0 libaudiocdplugins.so.4.3.0 -rwxr-xr-x. root root system_u:object_r:lib_t:s0 libaudiofile.so.0.0.2 -rwxr-xr-x. root root system_u:object_r:lib_t:s0 libavahi-client.so.3.2.5 -rwxr-xr-x. root root system_u:object_r:lib_t:s0 libavahi-common.so.3.5.1 -rwxr-xr-x. root root system_u:object_r:lib_t:s0 libavahi-core.so.6.0.1 -rwxr-xr-x. root root system_u:object_r:lib_t:s0 libavahi-glib.so.1.0.1 -rwxr-xr-x. root root system_u:object_r:lib_t:s0 libavahi-gobject.so.0.0.1 -rwxr-xr-x. root root system_u:object_r:lib_t:s0 libavahi-qt3.so.1.0.2 -rwxr-xr-x. root root system_u:object_r:lib_t:s0 libavahi-ui.so.0.1.1 -rwxr-xr-x. root root system_u:object_r:lib_t:s0 libavc1394.so.0.3.0 (後略)
あれ? みんな lib_t なのか。違うのは x 権限があるかどうか・・・って付加すればいいのかね・・・
・・・
cdparanoia-alpha9.8-10m.mo6.i686
