[Bug 1208218] New: Mendeley flatpak fails to start in MicroOS - Gnome desktop
http://bugzilla.opensuse.org/show_bug.cgi?id=1208218 Bug ID: 1208218 Summary: Mendeley flatpak fails to start in MicroOS - Gnome desktop Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: MicroOS Assignee: kubic-bugs@opensuse.org Reporter: sunscape1@hotmail.com QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- Installed the Mendeley flatpak from flathub in MicroOS, but it will not launch. Mendeley is a popular reference manager. NAME="openSUSE MicroOS" VERSION="20230211" From a terminal, the error is... /app/extra/bin/mendeleydesktop: error while loading shared libraries: libQt5WebEngineCore.so.5: cannot enable executable stack as shared object requires: Permission denied Tried to install libqt5-qtwebengine, but the error persists. Is this a MicroOS issue or with the flatpak itself? -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208218 http://bugzilla.opensuse.org/show_bug.cgi?id=1208218#c1 Shawn Dunn <sfalken@cloverleaf-linux.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CONFIRMED CC| |sfalken@cloverleaf-linux.or | |g --- Comment #1 from Shawn Dunn <sfalken@cloverleaf-linux.org> --- This is an selinux issue. sudo ausearch -m AVC,USER_AVC,SELINUX_ERR,USER_SELINUX_ERR -ts recent ---- time->Wed Feb 15 09:10:06 2023 type=AVC msg=audit(1676481006.496:294): avc: denied { execstack } for pid=26835 comm="mendeleydesktop" scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=process permissive=0 ---- time->Wed Feb 15 09:10:13 2023 type=AVC msg=audit(1676481013.748:295): avc: denied { execstack } for pid=26850 comm="mendeleydesktop" scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=process permissive=0 ---- time->Wed Feb 15 09:10:57 2023 type=AVC msg=audit(1676481057.716:296): avc: denied { execstack } for pid=26962 comm="mendeleydesktop" scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=process permissive=0 Poking at it to sort out what needs to be fixed. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208218 http://bugzilla.opensuse.org/show_bug.cgi?id=1208218#c2 Shawn Dunn <sfalken@cloverleaf-linux.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|CONFIRMED |RESOLVED Resolution|--- |FIXED Assignee|kubic-bugs@opensuse.org |sfalken@cloverleaf-linux.or | |g --- Comment #2 from Shawn Dunn <sfalken@cloverleaf-linux.org> --- Running sudo setsebool selinuxuser_execstack 1 Results in the flatpak running just fine. For a local workaround, you can run: sudo setsebool -P selinuxuser_execstack 1 And it will remain persistent across reboots. Review of the policy itself would need to be addressed by the openSUSE Security team. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208218 http://bugzilla.opensuse.org/show_bug.cgi?id=1208218#c3 --- Comment #3 from Benjamin Sabatini <sunscape1@hotmail.com> --- Excellent. Thank you. -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠suse.com