Issues in latests updates - selinux, firefox and icedtea-web

[Jiri Vanek]

Hi all!

There is new rule in selinux (since slinux-policy.3) when enforcing for firefox (since 20)
When something launched in firefox is launching something, what is not in standard path 
(/usr/lib(64) /usr/bin ...), then  it is denied.

That is case of custom installations of icedtea-web (eg I have --prefix=~/icedtea-web-image)
The IcedTeaPlugin.so is launching java - and is palced in  {prefix} -  So is denied.

I think this behaviour is not a bug. However user is not always informed via "pop up" (is always in 
logs) so this can be confusing.

I think that the bug with ppups was already fixed so no bug even here.


Interesting is that other browsers are not affected.


J.