[Bug 15897] New: CrossOver "SELinux is preventing wine-preloader (unconfined_t) "mmap_zero" to <Unknown> (unconfined_t)."

http://bugs.winehq.org/show_bug.cgi?id=15897

Summary: CrossOver "SELinux is preventing wine-preloader
                    (unconfined_t) "mmap_zero" to <Unknown> (unconfined_t)."
           Product: Wine
           Version: unspecified
          Platform: PC
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: -unknown
        AssignedTo: [e-mail]
        ReportedBy: [e-mail]

Trust someone here can find the right place at CrossOver to put this - they're
not accepting Bugs or Tickets...

SELinux denials in rpm version.  See setroubleshoot output below (couldn't
easily create an attachment as I'm in 2 accounts).

Summary:

SELinux is preventing wine-preloader (unconfined_t) "mmap_zero" to <Unknown>
(unconfined_t).

Detailed Description:

SELinux denied access requested by wine-preloader. It is not expected that this
access is required by wine-preloader and this access may signal an intrusion
attempt. It is also possible that the specific version or configuration of the
application is causing it to require additional access.

Allowing Access:

You can generate a local policy module to allow this access - see FAQ
(http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Or you can disable
SELinux protection altogether. Disabling SELinux protection is not recommended.
Please file a bug report (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi)
against this package.

Additional Information:

Source Context                unconfined_u:system_r:unconfined_t:SystemLow-
                              SystemHigh
Target Context                unconfined_u:system_r:unconfined_t:SystemLow-
                              SystemHigh
Target Objects                None [ memprotect ]
Source                        wine-preloader
Source Path                   /opt/cxoffice/bin/wine-preloader
Port                          <Unknown>
Host                          morgansmachine.lan
Source RPM Packages           crossover-standard-demo-7.1.0-1
Target RPM Packages           
Policy RPM                    selinux-policy-3.0.8-121.fc8
Selinux Enabled               True
Policy Type                   targeted
MLS Enabled                   True
Enforcing Mode                Enforcing
Plugin Name                   catchall
Host Name                     morgansmachine.lan
Platform                      Linux morgansmachine.lan 2.6.26.5-libre.28.fc8 #1
                              SMP Sat Sep 20 16:46:09 EDT 2008 i686 i686
Alert Count                   78
First Seen                    Mon 03 Nov 2008 22:29:26 NZDT
Last Seen                     Mon 03 Nov 2008 22:38:38 NZDT
Local ID                      a0fcc4d1-9905-4f99-9589-fc13289d37cb
Line Numbers

Raw Audit Messages

host=morgansmachine.lan type=AVC msg=audit(1225705118.545:141): avc:  denied  {
mmap_zero } for  pid=8986 comm="wine-preloader"
scontext=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 tclass=memprotect

host=morgansmachine.lan type=SYSCALL msg=audit(1225705118.545:141):
arch=40000003 syscall=90 success=no exit=-13 a0=bf8cac44 a1=bf8cac44 a2=5a
a3=bf8caf5c items=0 ppid=8970 pid=8986 auid=501 uid=501 gid=501 euid=501
suid=501 fsuid=501 egid=501 sgid=501 fsgid=501 tty=(none) ses=2
comm="wine-preloader" exe="/opt/cxoffice/bin/wine-preloader"
subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 key=(null)