Fedora :: SELinux Has Prevented Wine From Performing An Unsafe Memory Operation
Nov 9, 2010
I have installed Wine on my Fedora 14 and got Security alert.SELinux has prevented wine from performing an unsafe memory operation.SELinux denied an operation requested by wine-preloader, a program used to run Windows applications under Linux. This program is known to use an unsafe operation on system memory but so are a number of malware/exploit programs which masquerade as wine. If you were attempting to run a Windows program your only choices are to allow this operation and reduce your system security against such malware or to refrain from running Windows applications under Linux. If you were not attempting to run a Windows application this indicates you are likely being attacked by some for of malware or program trying to exploit your system for nefarious purposes. My concern is if i hide this attempt, it will not stop wine to from trying to do it, only hide security alerts. This alert is occurred already nearly 5000 times in last 30 min and counting. Wine server is using 10% CPU on this, so only to hide alerts is not a solution, isn't it?
I am running Ubuntu 8.04 and evolution as mail client this is the error i receive in evolution on send & recive.I can receive mail but not send.Error while performing operation.
Welcome response error: Operation now in progress.
There are several options available, such as "Ignore Alert" and "Turn off memory protection". What are the consequences of choosing one or the other?I'm new to Fedora and I'm not familiar with SELinux. Can someone please give me guidelines (or explanation) on how to deal with SELinux alerts?
I have 2 hard drives on mu box 1st one is 500.0 MB ext4 Volume where I have my syste FC 13 and a 2nd one where I put my database files as follows 78.1 GB ext4 Volume usage = filesystem, format ext4
ih file browser, I can see an icon for a 80GB hard drive but whenever I double click I get the following
Quote:
Error mounting volume: An error occured while performing an operation on data Partition 1 of ATA Maxtor <: <the operation failed
clicking details
Quote:
Error mounting: mount exited with exit code 1: helper failed with: mount: wrong fs type, bad option, bad superblock on /dev/sda1, missing codepage or helper program, or other error
when I type
Quote:
dmesg | tail
I get
Quote:
# dmesg | tail [drm] nouveau 0000:01:00.0: Allocating FIFO number 3 [drm] nouveau 0000:01:00.0: nouveau_channel_alloc: initialised FIFO 3 [drm] nouveau 0000:01:00.0: Allocating FIFO number 4
What is very strange is that mysql works fine.In disk utility, it indicates that disk is healthy, but when I click check file system i get
File system check on "data" (Partition 1 of ATA MAXTOR STM380215A) completed File system is NOT clean
I have had two instances recently where I was unable to log in to my computer with uid 500, but I could log in as root. In the first case, I could log in as user 500 to virtual terminals (ctrl-alt-F2, etc) but I could not log in to X. I found that, in the file /etc/pam.d/password-auth-acthere was an extra line that read"accountrequiredpam.access.so"I did not put that line there. When I removed the line, I could log in fine.In the other case, I could log in as user 500 to X, but could not log in to virtual terminals as user 500 (but could as root). I found that, in the file/etc/pam.d/system-auth-acThere was the same extra line as above. And again, I did not put it there, but when I removed it the problem was solved and I could log in to virtual terminals as user 500.I would like to find out, step by step, what happens when I enter my username and password in either a virtual terminal or in X. The login info must be passed to something that checks some files and then lets me in or not. How does that work?
You can find a list of all the booleans for SELinux (Fedora 10) using getsebool -a My question is, is there a reference online that describes each one. Most of obvious but it's one of those "I have to know because it's there situation).
Wine is useless on one of my computers running lucid 32bits. If i try to run a program through wine or even winecfg I get the error:
wine: virtual memory exhausted
I have tried shredding all the files in the .wine directory, removing every package that have anything with wine in their name in synaptic, and sudo aptitude purge wine.
I am developing an application which has various modules; some pure fortran, some c++ linking to fortran, using g77 and g++. Does anyone know how to prevent 'fort.6' files being produced and put the output to 'stdout' instead? They are written by write(6,*) or write(*,*) statements. They end up in 'bin' which causes big problems.
Im trying to download and install wine memory emulator through the command line. I have found a lot of information about it; just can get it done. I have found the repository on winehq; just not sure where to put it.
I want to run a Web service that performs a lengthy calculation for the customer. If I let PHP perform the calculation, the script gets killed by server timeout. So I figured out it should initiate a batch job.However, the HTTP server process cannot initiate a batch job because user wwwrun is denied access to service at. Why is that so, and is it safe to remove this denial?
I am looking to buy some memory for my netbook. Currently I have 1 GB of DDR3 memory. However, the specification says that 2 GB of memory is the max. However, when I do the following it says that 4GB is the max:
I have seen this issue come up previously in the forum: external program calls are disabled due to unsafe options file permissions But the resolutions previously posted have not worked for me:
I noticed that slapt-get excludes a lot of package titles based on aaa, glibc, and kernel. I've been wondering why, and haven't been able to find any definitive answers... Anyone here have any ideas on why that is? My Slackware installation is currently kernel 2.6.29.6 (I think) and the newest available on the official repositories is 2.6.32.5 (or something like that).
When I put in slapt-get --upgrade it spits out about 15 packages that are excluded that it won't upgrade. Now, I know I can remove the exclusions by editing the slapt-get configuration file, but I don't want to if it's going to screw something up. So my question is: Is there a reason those are excluded? Is it unsafe to upgrade the kernel with slapt-get?
I am new to fedora and installed wine to see if I could get the sony reader software working (required to access sony bookstore from my sony ereader). Well the program did not work though it did create icons on my desktop. wine kept crashing and I said lets just get rid of it. I uninstalled wine via yum remove and nothing appeared to happen so I did rpm -qa |grep wine and saw lots of stuff. So I simply did yum remove wine* and then a rpm -qa |grep wine was empty. however wine is still under applications on my desktop and still has a category for programs--reader. I should also mention that while wine was installed I attempted to remove the reader via the wine uninstalller but a) wine gave a message of a core crash and b) all the uninstaller did was give me the option to reinstall the reader program. so now when I attempt to open an epub it tries with the sony reader software. I know I can just right click to use another program but for now I want wine gone completely from my pc and the sony program gone.
some info on the drive - it's a USB 2.0 portable hard drive (PQI H560), one partition spanning all 640GB, NTFS. Used almost exclusively on Linux (arch and ubuntu), but initially formatted on Windows 7.The hard drive has quite a lot of hard links on it, as it was a timemachine-like backup system.And now the issue itself:Today I made the mistake of taking out my portable hard drive from my Linux system and plugging it in a Windows 7 box. Everything worked nice, I took a movie from the drive, and it lay dormant for an hour or so. After that I took the drive out (forgot to unmount :/) and put it back in my Linux.
Any idea why did it break so bad? I thought NTFS was kind of durable.Best if there would be something nondestructive (be able to get the data while preserving every bit of the drive in it's current state - just to be sure it doesn't break anything)
I'm running into some problems setting up Tor on Fedora 14. I have followed the following guide to a T (although I realize it is for Fedora 10):orum.org/showthread.php?t=211516.I believe the problem is SELinux... but I'm not sure. Has anyone had any success running Tor in Fedora 14 without it bugging out? If not, is there some sort of Unix alternative?
I have installed Fedora 10 in my laptop. After installation in Fedora 10, im not able to use Touchpad to perform a task like to open a folder/open a window/select a word. I am doing above mentioned operations through left button/right button.
user that started using Ubunto 6 month ago and I have now also installed fedora 13 to see wich operation system I like best... I have 3 primary partitions 1 for windows 1 for fedora and 1 for ubuntohen I installed ubunto I had a LILO (linux loader) like program that made me choose between Ubunto and Windows at start up... after installing fedora it goes automaticaly to fedora w/o making me choose... I can still mount my win/ubunto partitions so I haven't messed up compleatly... how do I "restablish" the linux loader deamon so that I can choose freely between the 3 operation systems?
second... when I installed linux stupid windows killed my backup hard drive where there are a lot of valuable resarch data... so now I have a 6 gb "unalocated" partition that I would love to be able to recover.... I would appriciate if somone had the answers to my guestions... so fare I like fedora because it seems better organised than ubuntu though the difference between the two linux distrubitons are hardly notacable
I came across the following method of how to permanently disabling selinux and it's notifications. Although changing enforcement from the gui into permissive mode does most of the job, the notifications still pop-up when some applications are started.
So to disable it do the following:
open terminal as root and execute:
Quote:
And then change the SELINUX line to SELINUX=disabled
Quote:
This is it. Now reboot the system and selinux will never bother you again.
If you are not a Fedora user and you are using this forum just because we are cooler here then you will not find the /etc/selinux/config as in the fedora releases. What you need to do is to edit the kernel boot line and add selinux=0 at the end:
After my cloning problems this morning were resolved, I have been able to complete conversion of the clone to run from an encrypted root partition. However, I have been unable to enable selinux when running from the encrypted root. /etc/selinux/config contains the settings that work on my unencrypted system
SELINUX=enforcing SELINUXTYPE=targeted
and it is not disabled from the grub bootline, but the encrypted system always comes up with selinux disabled. Attempting to enable it with the command setenforce 1 fails, and to add insult to injury, the selinux administration-gui shows that it is enabled and enforcing. The cloned, now encrypted, system was cloned via rsync -aHXv, so the selinux contexts/attributes have been maintained as near as I can tell. I did have to disable selinux while performing the rsync of the /selinux directory in order to get it to copy and I am wondering if there was still some issue with this method.
I know some of you are running from encrypted root fs's and was wondering: Do you have selinux enabled and is it functioning properly? Any suggestions as to how I might jumpstart it or force it to run? Maybe I should boot into the system and uninstalling/reinstalling selinux?
I just upgraded to fedora 12 via clean install with old /home partition and deleting old config files, and here is my issue. I need to edit the menu, and I need to set SELinux to permissive. OOo will not run with SELinux enabled for some reason, and besides, all my systems use SELinux in permissive. These two options no longer exist in the menu
I'm attempting to get MapServer running on my Fedora 13 computer. I was able to install with the package manager, and the executable (mapserv) was originally placed in /usr/sbin. But I need it in /var/www/cgi-bin to work on the webserver. So I copied the file to the right location. Unfortunately, it doesn't have the correct SELinux context. Here's the message from the troubleshooter:
SELinux denied access requested by /var/www/cgi-bin/mapserv. /var/www/cgi-bin/mapserv is mislabeled. /var/www/cgi-bin/mapserv default type is httpd_sys_script_exec_t, but its current type is httpd_sys_script_exec_t. Changing this file back to the default type, may fix your problem.
How's that for circular logic? Does anyone have an idea what the correct SELinux context for a cgi-bin executable might be?
Trying to keep selinux enabled. When I start SeLinux Troubleshooter from the menu, which is inautostart as well, It tells me SELinux not enabled, sealert will not run on nonSELinus systems".How do I get SELinux permanently started then
