Ticket #24 (new defect)

Opened 12 years ago

Last modified 8 years ago

MP3 plugin doesn't load with SELinux

Reported by: dswbike@… Owned by: salvarez
Priority: highest Milestone:
Component: gst-fluendo-mp3dec Version:
Severity: blocker Keywords:
Cc:

Description

Purchased the complete package of proprietary CODEC's. They work on Ubuntu/Mint.

On FC6-i386 installed into ~/.gstreamer-0.10/plugins with permissions 755 and owned by user. Some of the CODEC's load, other don't. Forexample, libgstflump3dec.so does not load. FC6 has default SELinux policy. Attached gst-debug log.

Attachments

gst-debug.log.bz2 Download (63.5 KB) - added by anonymous 12 years ago.
registry.x86_64.xml Download (247.2 KB) - added by anonymous 11 years ago.

Change History

Changed 12 years ago by anonymous

follow-up: ↓ 2   Changed 12 years ago by abo@…

The quick fix is to install in the default plugin location (/usr/lib/gstreamer-0.10) and then run:

/sbin/restorecon /usr/lib/gstreamer-0.10/libgstflump3dec.so

Then it'll automatically get the right permissions and keep them even if restorecon is run on the whole filesystem.

in reply to: ↑ 1   Changed 12 years ago by anonymous

If you don't have root access you can also cd ~/.gstreamer-0.10/plugins/ chcon --type=textrel_shlib_t *.so

  Changed 12 years ago by jan

I don't know how we can fix this. I'm fairly sure it's caused by Intel's IPP library, which we can't change other than to upgrade. Supposedly, IPP is built using -fPIC, so we shouldn't have this trouble. Certainly, all the GStreamer plugin code is built using -fPIC.

I note that the .so on x86_64 doesn't have any Text Relocation segments.

Perhaps someone who knows more about text relocations can help enlighten me? At the moment it seems that possible solutions are * Upgrade IPP and see if it's fixed (we're using 5.1 atm, 5.2 is available as a beta) * Dynamically link to IPP and see if that fixes it (means distributing IPP .so files with the plugin though, so not a good option) * Write optimisations for the C decoder to make it fast enough, and decouple ourselves from IPP entirely (best option in the long term, as it will remove all closed-source dependencies, however optional)

  Changed 12 years ago by jan

  • owner changed from somebody to jan
  • status changed from new to assigned

Also, a link to Ulrich's paper on what text relocations are might be helpful to someone:  http://people.redhat.com/drepper/textrelocs.html

  Changed 11 years ago by Christian

We are working on this problem, but due to relying on some proprietary 3rd party software we are a bit stuck atm, but we will update the plugins with a fix for this as soon as possible,

Changed 11 years ago by anonymous

  Changed 11 years ago by Bastien Nocera <bnocera@…>

  • summary changed from Some of the commercial Fluendo plugins(mp3) do not load on FC6-i386. to MP3 plugin doesn't load with SELinux

Reported with codeina as well:  https://bugzilla.redhat.com/show_bug.cgi?id=29874

This is a blocker for codeina inclusion in Fedora 8 as the mp3 plugin doesn't work with the default security settings.

  Changed 11 years ago by valent.turkovic@…

  • priority changed from normal to highest
  • severity changed from critical to blocker

I can also confirm this bug on Fedora 8 test 3 with latest updates.

I was really puzzled how totem wouldn't play any mpeg1 and mpeg2 files under Fedora (with selinux enabled) but it played them without problem on openSuse.

When I realized what was the issue I emmediately came here.

You would be nice if you would adjust your documentation so that atleast Fedora users are aware of this bug and what to do before you fix the issue.

Thank you, Valent.

  Changed 10 years ago by salvarez

  • owner changed from jan to salvarez
  • status changed from assigned to new

in reply to: ↑ description   Changed 10 years ago by anonymous

Replying to dswbike@gmail.com:

Purchased the complete package of proprietary CODEC's. They work on Ubuntu/Mint. On FC6-i386 installed into ~/.gstreamer-0.10/plugins with permissions 755 and owned by user. Some of the CODEC's load, other don't. Forexample, libgstflump3dec.so does not load. FC6 has default SELinux policy. Attached gst-debug log.

  Changed 10 years ago by sriapec@…

when i type ]$ chcon --type=textrel_shlib_t $HOME/.gstreamer-0.10/plugins/*.so

the terminal displays chcon: can't apply partial context to unlabeled file /home/nirnay/.gstreamer-0.10/plugins/libgstflump3dec.so

wht should i do i am working on fedora 9 at office and at home, the installation at home had no prblms . why? help!

  Changed 10 years ago by anonymous

Based on the great explanation given in a related ticket (Ticket #86, SELinux text relocation error in libgstflump3dec.so), you need to do something like

chcon -t textrel_shlib_t ...

Note there is no "=" when setting the type.

  Changed 10 years ago by AndersOlson@…

I've got the following error message then installing by double-click on the RPM. I'm using Fedora 10

Error Type: <type 'exceptions.UnicodeDecodeError?'> Error Value: 'ascii' codec can't decode byte 0xc3 in position 61: ordinal not in range(128)

File : /usr/lib/python2.5/site-packages/yum/rpmtrans.py, line 376, in callback

self._instProgress( bytes, total, h )

File : /usr/lib/python2.5/site-packages/yum/rpmtrans.py, line 457, in _instProgress

self.complete_actions, self.total_actions)

File : /usr/share/PackageKit/helpers/yum/yumBackend.py, line 2187, in event

self._showName(self.info_actions[action])

File : /usr/share/PackageKit/helpers/yum/yumBackend.py, line 2180, in _showName

self.base.package(package_id, status, self.curpkg.summary)

File : /usr/share/PackageKit/helpers/yum/yumBackend.py, line 230, in package

PackageKitBaseBackend?.package(self, package_id, status, summary)

File : /usr/lib/python2.5/site-packages/packagekit/backend.py, line 109, in package

print >> sys.stdout, "package\t$s\t$s\t$s" $ (status, package_id, summary)

follow-up: ↓ 15   Changed 9 years ago by dolphy

Can you try downloading the package again ? It looks like your file is corrupted.

  Changed 9 years ago by anonymous

When installing Fluendo in Fedora 10(32 bit) with the rpm packager it fails due to no file signature. It is a new download from the website.

in reply to: ↑ 13   Changed 8 years ago by anonymous

Replying to dolphy:

Can you try downloading the package again ? It looks like your file is corrupted.

Note: See TracTickets for help on using tickets.