Linux chromium通过yum安装解决不能使用问题

1. view plaincopy to clipboardprint?
2. Summary:
3. SELinux is preventing /usr/lib/chromium-browser/chromium-browser from loading
4. /usr/lib/chromium-browser/libmedia.so which requires text relocation.
5. Detailed Description:
6. The chromium-browse application attempted to load
7. /usr/lib/chromium-browser/libmedia.so which requires text relocation. This is a
8. potential security problem. Most libraries do not need this permission.
9. Libraries are sometimes coded incorrectly and request this permission. The
10. SELinux Memory Protection Tests
11. (http://people.redhat.com/drepper/selinux-mem.html) web page explains how to
12. remove this requirement. You can configure SELinux temporarily to allow
13. /usr/lib/chromium-browser/libmedia.so to use relocation as a workaround, until
14. the library is fixed. Please file a bug report.
15. Allowing Access:
16. If you trust /usr/lib/chromium-browser/libmedia.so to run correctly, you can
17. change the file context to textrel_shlib_t. "chcon -t textrel_shlib_t
18. '/usr/lib/chromium-browser/libmedia.so'" You must also change the default file
19. context files on the system in order to preserve them even on a full relabel.
20. "semanage fcontext -a -t textrel_shlib_t
21. '/usr/lib/chromium-browser/libmedia.so'"
22. Fix Command:
23. chcon -t textrel_shlib_t '/usr/lib/chromium-browser/libmedia.so'
24. Additional Information:
25. Source Context unconfined_u:unconfined_r:unconfined_execmem_t:s0-
26. s0:c0.c1023
27. Target Context system_u:object_r:lib_t:s0
28. Target Objects /usr/lib/chromium-browser/libmedia.so [ file ]
29. Source chromium-browse
30. Source Path /usr/lib/chromium-browser/chromium-browser
31. Port <Unknown>
32. Host bonn.yang
33. Source RPM Packages chromium-4.0.273.0-0.1.20091216svn34775.fc12
34. Target RPM Packages chromium-libs-4.0.273.0-0.1.20091216svn34775.fc12
35. Policy RPM selinux-policy-3.6.32-56.fc12
36. Selinux Enabled True
37. Policy Type targeted
38. Enforcing Mode Enforcing
39. Plugin Name allow_execmod
40. Host Name bonn.yang
41. Platform Linux bonn.yang 2.6.31.6-166.fc12.i686.PAE #1 SMP
42. Wed Dec 9 11:00:30 EST 2009 i686 i686
43. Alert Count 11
44. First Seen Wed 23 Dec 2009 09:38:16 PM CST
45. Last Seen Wed 23 Dec 2009 10:28:36 PM CST
46. Local ID b1f55f28-145d-48dd-9d71-6fb7fe6a57c8
47. Line Numbers
48. Raw Audit Messages
49. node=bonn.yang type=AVC msg=audit(1261578516.240:27332): avc: denied { execmod } for pid=2946 comm="chromium-browse" path="/usr/lib/chromium-browser/libmedia.so" dev=sda2 ino=277322 scontext=unconfined_u:unconfined_r:unconfined_execmem_t:s0-s0:c0.c1023 tcontext=system_u:object_r:lib_t:s0 tclass=file
50. node=bonn.yang type=SYSCALL msg=audit(1261578516.240:27332): arch=40000003 syscall=125 success=no exit=-13 a0=8ff8000 a1=63000 a2=5 a3=bf899bf0 items=0 ppid=1 pid=2946 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="chromium-browse" exe="/usr/lib/chromium-browser/chromium-browser" subj=unconfined_u:unconfined_r:unconfined_execmem_t:s0-s0:c0.c1023 key=(null)
51. Summary:
52. SELinux is preventing /usr/lib/chromium-browser/chromium-browser from loading
53. /usr/lib/chromium-browser/libmedia.so which requires text relocation.
54. Detailed Description:
55. The chromium-browse application attempted to load
56. /usr/lib/chromium-browser/libmedia.so which requires text relocation. This is a
57. potential security problem. Most libraries do not need this permission.
58. Libraries are sometimes coded incorrectly and request this permission. The
59. SELinux Memory Protection Tests
60. (http://people.redhat.com/drepper/selinux-mem.html) web page explains how to
61. remove this requirement. You can configure SELinux temporarily to allow
62. /usr/lib/chromium-browser/libmedia.so to use relocation as a workaround, until
63. the library is fixed. Please file a bug report.
64. Allowing Access:
65. If you trust /usr/lib/chromium-browser/libmedia.so to run correctly, you can
66. change the file context to textrel_shlib_t. "chcon -t textrel_shlib_t
67. '/usr/lib/chromium-browser/libmedia.so'" You must also change the default file
68. context files on the system in order to preserve them even on a full relabel.
69. "semanage fcontext -a -t textrel_shlib_t
70. '/usr/lib/chromium-browser/libmedia.so'"
71. Fix Command:
72. chcon -t textrel_shlib_t '/usr/lib/chromium-browser/libmedia.so'
73. Additional Information:
74. Source Context unconfined_u:unconfined_r:unconfined_execmem_t:s0-
75. s0:c0.c1023
76. Target Context system_u:object_r:lib_t:s0
77. Target Objects /usr/lib/chromium-browser/libmedia.so [ file ]
78. Source chromium-browse
79. Source Path /usr/lib/chromium-browser/chromium-browser
80. Port <Unknown>
81. Host bonn.yang
82. Source RPM Packages chromium-4.0.273.0-0.1.20091216svn34775.fc12
83. Target RPM Packages chromium-libs-4.0.273.0-0.1.20091216svn34775.fc12
84. Policy RPM selinux-policy-3.6.32-56.fc12
85. Selinux Enabled True
86. Policy Type targeted
87. Enforcing Mode Enforcing
88. Plugin Name allow_execmod
89. Host Name bonn.yang
90. Platform Linux bonn.yang 2.6.31.6-166.fc12.i686.PAE #1 SMP
91. Wed Dec 9 11:00:30 EST 2009 i686 i686
92. Alert Count 11
93. First Seen Wed 23 Dec 2009 09:38:16 PM CST
94. Last Seen Wed 23 Dec 2009 10:28:36 PM CST
95. Local ID b1f55f28-145d-48dd-9d71-6fb7fe6a57c8
96. Line Numbers
97. Raw Audit Messages
98. node=bonn.yang type=AVC msg=audit(1261578516.240:27332): avc: denied { execmod } for pid=2946 comm="chromium-browse" path="/usr/lib/chromium-browser/libmedia.so" dev=sda2 ino=277322 scontext=unconfined_u:unconfined_r:unconfined_execmem_t:s0-s0:c0.c1023 tcontext=system_u:object_r:lib_t:s0 tclass=file
99. node=bonn.yang type=SYSCALL msg=audit(1261578516.240:27332): arch=40000003 syscall=125 success=no exit=-13 a0=8ff8000 a1=63000 a2=5 a3=bf899bf0 items=0 ppid=1 pid=2946 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="chromium-browse" exe="/usr/lib/chromium-browser/chromium-browser" subj=unconfined_u:unconfined_r:unconfined_execmem_t:s0-s0:c0.c1023 key=(null)

试了半天也没能在SELinux中设好libmedia.so的permission（有人说只要把libmedia.so的permission 设为permissive就可以）。后来在一个法语的网页上(http://tuxmaya.wordpress.com/2009/12/21 /nuevos-paquetes-de-chormium-en-fedora/ )发现了这样一条命令来取消 SELinux 对 /usr/lib/chromium-browser/下的所有.so文件的permission 的检查。

1. view plaincopy to clipboardprint?
2. chcon -t texrel_shlib_t /usr/lib*/chromium-browser/*.so
3. chcon -t texrel_shlib_t /usr/lib*/chromium-browser/*.so

另外，该网页(http://forums.fedoraforum.org/showthread.php?t=237029 )上也提到了这种方法。

设置之后，Linux chromium就可以正常工作了。这篇博文就是用Linux chromium来写的。

PS:

写完博文后在SELinux的错误信息中发现了fix的方法：

1. view plaincopy to clipboardprint?
2. hcon -t textrel_shlib_t '/usr/lib/chromium-browser/libmedia.so'
3. hcon -t textrel_shlib_t '/usr/lib/chromium-browser/libmedia.so'

1. view plaincopy to clipboardprint?
2. semanage fcontext -a -t textrel_shlib_t
3. '/usr/lib/chromium-browser/libmedia.so'
4. semanage fcontext -a -t textrel_shlib_t
5. '/usr/lib/chromium-browser/libmedia.so'

实在是太粗心了，当时竟然没有仔细看…… 谨记这一教训！

相关阅读 更多 +

• 
  永劫无间多少钱开一个箱子 游戏攻略 2024-12-20
• 
  永劫无间多少钱一个红 游戏攻略 2024-12-20
• 
  console.log()的作用 console.log()的用法 php教程 2024-12-19
• 
  原神劫波莲采集位置 游戏攻略 2024-12-19
• 
  特工17号存档导入方法 游戏攻略 2024-12-19

排行榜 更多 +

辰域智控app

系统工具 下载

网医联盟app

运动健身 下载

汇丰汇选App

金融理财 下载

• 4
  律动鼓点舞app

  85.51M · 92℃

  1970-01-01

  下载
• 5
  海淘免税店app

  81.86M · 93℃

  1970-01-01

  下载
• 6
  工银商户之家app

  78.09M · 93℃

  1970-01-01

  下载

Copyright 2006-2020 (phpxiu.com) All Rights Reserved.

本站为非盈利性网站，不接受任何广告。php爱好者