Problems and solutions for Fedora 12 upgrade chromium

Since the installation of Fedora 12 after the discovery of chromium can not be installed with RPM, install is always missing that, very laborious, so according to the online method, under the/etc/yum.repos.d/to create a Chromium.repo, the contents are as follows:

[Chromium] Name=chromium Test Packages baseurl=http://spot.fedorapeople.org/chromium/f$releasever/enabled=0 Gpgcheck=0

Then you can install it through the Yum.

Today in Fedora people saw a new chromium installation package appeared, and was planning to upgrade chromium. All the RPM packages have been downloaded (forgetting that they were originally installed via Yum). Installation chromium, CHROMIUM-LIBS can be installed through the RPM-UVH normal, but the upgrade V8 still out of the question. Recall the previous lesson, intend to first V8 completely uninstall and install, but the lack of uninstall, whether through rpm-e or yum remove.

At this time thought of using Yum upodate v8-*, the result appears "Package v8-devel-2.0.3-1.20091209svn3443.fc12.i686.rpm is not signed" error. Find a way online, is to edit /etc/yum.conf , gpgcheck=1 change to gpgcheck=0. However, there is a potential risk of doing so, and the Gpgcheck is reset to 1 immediately after the V8 is installed.

Another strange problem is that when you open chromium, the browser does not open, and SELinux always error:

Summary:selinux is preventing/usr/lib/chromium-browser/chromium-browser from loading/usr/lib/chromium-browser/ Libmedia.so which requires text relocation. Detailed description:the chromium-browse application attempted to load/usr/lib/chromium-browser/libmedia.so which Requires text relocation. This is a potential security problem. Most libraries does not need this permission. Libraries are sometimes coded incorrectly and request this permission. The SELinux Memory Protection Tests (http://people.redhat.com/drepper/selinux-mem.html) Web page explains how to remove th is requirement. Can configure SELinux temporarily to allow/usr/lib/chromium-browser/libmedia.so to use relocation as a workaround, UN Til the library is fixed. Please file a bug. Allowing Access:if you trust/usr/lib/chromium-browser/libmedia.so to run correctly, your can change the file context to T extrel_shlib_t. "Chcon-t textrel_shlib_t '/usr/lib/chromium-browser/libmedia.so '" You must also change the DefaulT file context files on the "system in" preserve them even on a full relabel. "Semanage fcontext-a-t textrel_shlib_t '/usr/lib/chromium-browser/libmedia.so '" Fix command:chcon-t textrel_shlib_t ' /usr/lib/chromium-browser/libmedia.so ' Additional information:source context Unconfined_u:unconfined_r:unconfined_ execmem_t:s0-s0:c0.c1023 Target context System_u:object_r:lib_t:s0 target objects/usr/lib/chromium-browser/ libmedia.so [file] source Chromium-browse source Path/usr/lib/chromium-browser/chromium-browser Port <Unknown> H OST Bonn.yang Source rpm Packages chromium-4.0.273.0-0.1.20091216svn34775.fc12 Target rpm Packages CHROMIUM-LIBS-4.0.273.0-0.1.20091216SVN34775.FC12 Policy RPM selinux-policy-3.6.32-56.fc12 selinux Enabled True Policy Type targeted enforcing Mode enforcing Plugin Name allow_execmod Host Name bonn.yang Platform Linux Bonn.yang 2.6.3 1.6-166.fc12.i686.pae #1 SMP Wed Dec 9 11:00:30 EST 2009 i686 i686 Alert Count one seen Wed Dec 2009 09:38:16 pm CST last seen Wed DEC 2009 10:28:36 PM CST Local ID b1f55f28-145d-48dd-9d71-6fb7fe6a57c8 line Numbers Raw Audit Me Ssages Node=bonn.yang TYPE=AVC Msg=audit (1261578516.240:27332): avc:denied {execmod} for pid=2946 comm= "Chromium-brows E "path="/usr/lib/chromium-browser/libmedia.so "Dev=sda2 ino=277322 scontext=unconfined_u:unconfined_r:unconfined_ execmem_t:s0-s0:c0.c1023 tcontext=system_u:object_r:lib_t:s0 tclass=file Node=bonn.yang Type=SYSCALL msg=audit ( 1261578516.240:27332): arch=40000003 syscall=125 success=no exit=-13 a0=8ff8000 a1=63000 a2=5 a3=bf899bf0 items=0-ppid=1 pid=2946 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="chromium- Browse "exe="/usr/lib/chromium-browser/chromium-browser "subj=unconfined_u:unconfined_r:unconfined_execmem_t: s0-s0:c0.c1023 key= (NULL)  

Tried for a long time also failed to set up a good libmedia.so in the SELinux permission (some people said that only the permission of the libmedia.so set as permissive can). Later on a French page (http://tuxmaya.wordpress.com/2009/12/21/nuevos-paquetes-de-chormium-en-fedora/) found such a command to cancel the SELinux Check the permission of all. so files under/usr/lib/chromium-browser/.

Chcon-t texrel_shlib_t/usr/lib*/chromium-browser/*.so

In addition, this approach is also mentioned in the Web page (http://forums.fedoraforum.org/showthread.php?t=237029).

After setting, the chromium can work properly. This blog post is written in chromium.

Ps:

After writing your blog post, you found the Fix method in SELinux's error message:

Hcon-t textrel_shlib_t '/usr/lib/chromium-browser/libmedia.so '

Semanage fcontext-a-T textrel_shlib_t '/usr/lib/chromium-browser/libmedia.so '

It was so careless that I didn't look at it carefully. Keep this lesson in mind.