On 07/30/2017 10:30 PM, Paul Allen Newell wrote:


On 07/30/2017 09:02 PM, Ed Greshko wrote:
You could always run FF with NoScript disabled to verify.

Assuming you didn't install FF in a non-Fedora way.  I think I would go about
relabeling, just for peace of mind.

To do that, I would at a minimum do

fixfiles -R firefox restore

or at a maximum

touch /.autorelabel
reboot



I have to admit, it sure didn't seem like I needed to run this test with NoScript off, but I figured I owed it for completeness. Imagine the large plate of crow delivered to me when I go the "no printer".

Turned NoScript back on and only allowed enough permissions to get the crossword up on screen. Still "no printer". Two or three times (getting bored of the Trivago ad). On the last try, I got a notice that Flash Plugin had crashed in Firefox. It asked if it wanted to be reloaded, I said yes and the crossword puzzle came up. This time the printer was available and wanted to print the crossword.

No SELinux alerts accept for "my usual NVidia ones" of SELinux is preventing /usr/lib64/firefox/plugin-container from sendto access on the unix_dgram_socket @nvidia15a01b57 which says I should setsebool -P unconfined_mozilla_plugin_transition 0. It did not occur. The ABRT is about "plugin-container killed by SIGSEGV". The SELinux alert appears to have occurred after I restarted Flash

Firefox was installed in the default install from DVD and have always updated through yum.

I checked my add-ons in Firefox to see if I had anything else, I do see the Web Developer 1.2.13 extension (that plate of crow is preventing me from assuming that it could have nothing to do with things ...). The only plugins I have added is Widevine Content Decryption Module provided by Google Inc 1.4.8.903 ... all the rest (except Flash) are from rhel et al or mozilla

At this point, I am more suspect of Flash than SELinux file settings given that a crash and reloading got me the printer for the crossword puzzle

I read the man page on fixfiles and it makes sense. Luckily, was able to search for the touch option by googling "touch ./autorelabel" so I understand what you mean by "at a maximum".

For reference:
flash-plugin: 26.0.0.137
firefox: 52.2.0

Not to keep beating this as I think it is resolved given seeing things working after reloading flash when it didn't work prior, I did want to mention that tonight (sorry for the delay in doing this but something else came up), I ran:
[root@birdinhand ~]# fixfiles -R firefox check
Warning: Skipping the following R/O filesystems:
/sys/fs/cgroup
[root@birdinhand ~]#
and it appears that fixfiles thinks that everything except the read-only directory is okay and nothing needs to be fixed/restored.