[求助]FC5 yum update 后出现很多问题！！连firefox都打不开了...

cc0219

在update过程中出现了很多的/sbin/restorecon ** ，当时就觉得不对劲
现在很多软件都打不开
[maplerian@belldandy ~]$ mplayer
mplayer: error while loading shared libraries: libmp3lame.so.0: cannot enable executable stack as shared object requires: Permission denied

[maplerian@belldandy ~]$ realplay
Fontconfig warning: "local.conf", line 102: unknown element "other_family"

** (realplay.bin:10850): WARNING **: HXPlayer: Error 0x80004005: "A general error has occurred."

** ERROR **: Could not create helix engine. Make sure your helix libs are installed at: HELIX_LIBS=/usr/lib/RealPlayer10
aborting...
/usr/bin/realplay: line 75: 10850 Aborted                 $REALPLAYBIN "$@"

[maplerian@belldandy ~]$ amule
amule: error while loading shared libraries: /usr/lib/libSDL-1.2.so.0: cannot restore segment prot after reloc: Permission denied
等等。

Apr 14 11:37:57 belldandy kernel: audit(1144985877.279:53): avc:  denied  { execstack } for  pid=10081 comm="mixer_applet2" scontext=user_u:system_r:unconfined_t:s0 tcontext=user_u:system_r:unconfined_t:s0 tclass=process
Apr 14 11:38:09 belldandy kernel: audit(1144985889.616:54): avc:  denied  { execmod } for  pid=10125 comm="firefox-bin" name="libxpcom_core.so" dev=hda2 ino=787500 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_ubject_r:lib_t:s0 tclass=file
Apr 14 11:40:34 belldandy kernel: audit(1144986034.109:55): avc:  denied  { execstack } for  pid=10182 comm="rhythmbox" scontext=user_u:system_r:unconfined_t:s0 tcontext=user_u:system_r:unconfined_t:s0 tclass=process
Apr 14 11:44:57 belldandy kernel: audit(1144986297.810:56): avc:  denied  { execmod } for  pid=10261 comm="java" name="libkeybinder.so" dev=hda2 ino=1203164 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_ubject_r:lib_t:s0 tclass=file
Apr 14 11:47:40 belldandy yum: Installed: firefox.i386 1.5.0.1-9
Apr 14 11:47:49 belldandy kernel: audit(1144986469.992:57): avc:  denied  { execmod } for  pid=10342 comm="firefox-bin" name="libxpcom_core.so" dev=hda2 ino=782721 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_ubject_r:lib_t:s0 tclass=file
Apr 14 11:49:20 belldandy kernel: audit(1144986560.706:58): avc:  denied  { execmod } for  pid=10369 comm="firefox-bin" name="libxpcom_core.so" dev=hda2 ino=782721 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_ubject_r:lib_t:s0 tclass=file
Apr 14 11:50:58 belldandy kernel: audit(1144986658.956:59): avc:  denied  { execstack } for  pid=10382 comm="gmplayer" scontext=user_u:system_r:unconfined_t:s0 tcontext=user_u:system_r:unconfined_t:s0 tclass=process
Apr 14 11:51:11 belldandy kernel: audit(1144986671.941:60): avc:  denied  { execstack } for  pid=10387 comm="gmplayer" scontext=user_u:system_r:unconfined_t:s0 tcontext=user_u:system_r:unconfined_t:s0 tclass=process
Apr 14 11:51:23 belldandy kernel: audit(1144986683.958:61): avc:  denied  { execstack } for  pid=10399 comm="gmplayer" scontext=user_u:system_r:unconfined_t:s0 tcontext=user_u:system_r:unconfined_t:s0 tclass=process

现在该怎么办呢.....没想到update也很容易出问题。。
不懂原理做起来真是太危险了。。哎

cc0219

问题似乎解决了。。
把selinux 设置了disabled就好了。
回头应该研究下selinux是怎么回事

aaccdd

这是升级selinux相关包的后果，
之前所做security contexts修改都会丢失，
手动恢复之前的配置、或书写本地策略、或禁用selinux。