使用 命令glxgears时:
glxgears: error while loading shared libraries: /usr/lib/xorg/libGL.so.1: cannot restore segment prot after reloc: Permission denied
还有在运行kmplayer 时,出现:
mplayer: error while loading shared libraries: /usr/lib/libGL.so.1: cannot restore segment prot after reloc: Permission denied
在SElinux里提示信息如下:
==================================================
Summary
SELinux is preventing /usr/bin/mplayer from loading
/usr/lib/xorg/libGL.so.1.2 which requires text relocation.
Detailed Description
The /usr/bin/mplayer application attempted to load
/usr/lib/xorg/libGL.so.1.2 which requires text relocation. This is a
potential security problem. Most libraries do not need this permission.
Libraries are sometimes coded incorrectly and request this permission. The
http://people.redhat.com/drepper/selinux-mem.html web page explains how to
remove this requirement. You can configure SELinux temporarily to allow
/usr/lib/xorg/libGL.so.1.2 to use relocation as a workaround, until the
library is fixed. Please file a
http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package.
Allowing Access
If you trust /usr/lib/xorg/libGL.so.1.2 to run correctly, you can change the
file context to textrel_shlib_t. "chcon -t textrel_shlib_t
/usr/lib/xorg/libGL.so.1.2"
The following command will allow this access:
chcon -t textrel_shlib_t /usr/lib/xorg/libGL.so.1.2
Additional Information
Source Context root:system_r:unconfined_execmem_t:SystemLow-
SystemHigh
Target Context root:object_r:lib_t
Target Objects /usr/lib/xorg/libGL.so.1.2 [ file ]
Affected RPM Packages mplayer-1.0-0.76.20070612svn.lvn7 [application]
Policy RPM selinux-policy-2.6.4-8.fc7
Selinux Enabled True
Policy Type targeted
MLS Enabled True
Enforcing Mode Enforcing
Plugin Name plugins.allow_execmod
Host Name localhost.localdomain
Platform Linux localhost.localdomain 2.6.21-1.3194.fc7 #1
SMP Wed May 23 22:35:01 EDT 2007 i686 athlon
Alert Count 7
First Seen 2007年06月19日 星期二 07时50分54秒
Last Seen 2007年06月19日 星期二 17时37分05秒
Local ID 356be374-05c1-48b8-b602-dc1032097f10
Line Numbers
Raw Audit Messages
avc: denied { execmod } for comm="mplayer" dev=sda10 egid=0 euid=0
exe="/usr/bin/mplayer" exit=-13 fsgid=0 fsuid=0 gid=0 items=0
name="libGL.so.1.2" path="/usr/lib/xorg/libGL.so.1.2" pid=3096
scontext=root:system_r:unconfined_execmem_t:s0-s0:c0.c1023 sgid=0
subj=root:system_r:unconfined_execmem_t:s0-s0:c0.c1023 suid=0 tclass=file
tcontext=root:object_r:lib_t:s0 tty=(none) uid=0
====================================================
这段话是什么意思,小弟不是很明白,请高人指点下。
好像是我安装了ATI readon X700 驱动以后出现的,因为没有安装之前是可以正常运行kmplayer的。
不知道什么问题,哪位蝈蝈知道,告诉小弟下。
[ 此贴被zhengzejun在2007-06-19 09:50重新编辑 ]