Custom Query (89 matches)

Reported by MichielLeenaars, 22 months ago.

Samenvatting:

SELinux is preventing sip_im_session from loading /usr/lib/python2.5/site-packages/sipclient-0.3.0-py2.5-linux-i686.egg/pypjua/_pjsip.so which requires text relocation.

Gedetailleerde omschrijving:

The sip_im_session application attempted to load /usr/lib/python2.5/site-packages/sipclient-0.3.0-py2.5-linux-i686.egg/pypjua/_pjsip.so which requires text relocation. This is a potential security problem. Most libraries do not need this permission. Libraries are sometimes coded incorrectly and request this permission. The SELinux Memory Protection Tests ( http://people.redhat.com/drepper/selinux-mem.html) web page explains how to remove this requirement. You can configure SELinux temporarily to allow /usr/lib/python2.5/site-packages/sipclient-0.3.0-py2.5-linux-i686.egg/pypjua/_pjsip.so to use relocation as a workaround, until the library is fixed. Please file a bug report ( http://bugzilla.redhat.com/bugzilla/enter_bug.cgi) against this package.

Allowing Access:

If you trust /usr/lib/python2.5/site-packages/sipclient-0.3.0-py2.5-linux-i686.egg/pypjua/_pjsip.so to run correctly, you can change the file context to textrel_shlib_t. "chcon -t textrel_shlib_t '/usr/lib/python2.5/site-packages/sipclient-0.3.0-py2.5-linux-i686.egg/pypjua/_pjsip.so'" You must also change the default file context files on the system in order to preserve them even on a full relabel. "semanage fcontext -a -t textrel_shlib_t '/usr/lib/python2.5/site-packages/sipclient-0.3.0-py2.5-linux-i686.egg/pypjua/_pjsip.so'"

Fix Command:

chcon -t textrel_shlib_t '/usr/lib/python2.5/site-packages/sipclient-0.3.0-py2.5-linux-i686.egg/pypjua/_pjsip.so'

Additionele informatie:

Source Context unconfined_u:unconfined_r:unconfined_t:s0 Target Context unconfined_u:object_r:lib_t:s0 Target Objects /usr/lib/python2.5/site-packages/sipclient-0.3.0-p

y2.5-linux-i686.egg/pypjua/_pjsip.so [ file ]

Bron sip_im_session Source Path /usr/bin/python Poort <Onbekend> Host fd.taste Source RPM Packages python-2.5.2-1.fc10 Target RPM Packages Policy RPM selinux-policy-3.5.13-18.fc10 SELinux aangezet True Policy Type targeted MLS aangezet True Enforcing Mode Enforcing Pluginnaam allow_execmod Hostnaam fd.taste Platform Linux fd.taste 2.6.27.5-117.fc10.i686 #1 SMP Tue

Nov 18 12:19:59 EST 2008 i686 i686

Aantal waarschuwingen 2 Eerst gezien op za 29 nov 2008 03:36:12 CET Laatst gezien op za 29 nov 2008 03:36:24 CET Local ID b9ebb718-3798-423f-ad8a-496778e2aef1 Regelnummers

Raw Audit Messages

node=fd.taste type=AVC msg=audit(1227926184.725:41): avc: denied { execmod } for pid=11163 comm="sip_im_session" path="/usr/lib/python2.5/site-packages/sipclient-0.3.0-py2.5-linux-i686.egg/pypjua/_pjsip.so" dev=sda12 ino=374953 scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=unconfined_u:object_r:lib_t:s0 tclass=file

node=fd.taste type=SYSCALL msg=audit(1227926184.725:41): arch=40000003 syscall=125 success=no exit=-13 a0=762000 a1=165000 a2=5 a3=bfb29270 items=0 ppid=11025 pid=11163 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=pts5 ses=1 comm="sip_im_session" exe="/usr/bin/python" subj=unconfined_u:unconfined_r:unconfined_t:s0 key=(null)

Reported by ramdyne, 20 months ago.

Hi,

Just downloaded and installed the release version of SIP SIMPLE client on an Ubuntu Server machine (Intrepid, fully up to date) and it appears that OpenSER thinks the incoming REGISTER message is corrupt.

Jan 9 11:14:02 sip1 /usr/sbin/openser[12931]: ERROR:core:parse_via: invalid port number <102622> Jan 9 11:14:02 sip1 /usr/sbin/openser[12931]: ERROR:core:parse_via: <SIP/2.0/UDP 82.204.16.109:102622;rport;branch=z9hG4bKPjj5hHIwu2Sab9xzBS55 PXUqPxB2ce3dUX#015#012Route: <sip:82.148.198.196:5060;lr>#015#012Max-Forwards: 70#015#012From: "UNET Monitoring" <sip:unet_monitoring_2@mvoip.nl

;tag=owXIO32VUqlzkLf98WxbHfRu98DPp5E4#015#012To: "UNET Monitoring" <sip:unet_monitoring_2@mvoip.nl>#015#012Call-ID: yE9YajSE8uFZGTTe6XJnxztZNYn

UM9ip#015#012CSeq: 61684 REGISTER#015#012Contact: <sip:kVMr6Z02ss@82.204.16.109:102622>#015#012Expires: 300#015#012User-Agent: ag-projects/sipcl ient-0.3.0-pjsip-1.0-trunk#015#012Content-Length: 0#015#012#015#012> Jan 9 11:14:02 sip1 /usr/sbin/openser[12931]: ERROR:core:parse_via: parsed so far:<SIP/2.0/UDP 82.204.16.109:102622;rport;branch=z9hG4bKPjj5hHI wu2Sab9xzBS55PXUqPxB2ce3dUX#015#012> Jan 9 11:14:02 sip1 /usr/sbin/openser[12931]: ERROR:core:get_hdr_field: bad via Jan 9 11:14:02 sip1 /usr/sbin/openser[12931]: INFO:core:parse_headers: bad header field Jan 9 11:14:02 sip1 /usr/sbin/openser[12931]: ERROR:core:parse_msg: message=<REGISTER sip:mvoip.nl SIP/2.0#015#012Via: SIP/2.0/UDP 82.204.16.10 9:102622;rport;branch=z9hG4bKPjj5hHIwu2Sab9xzBS55PXUqPxB2ce3dUX#015#012Route: <sip:82.148.198.196:5060;lr>#015#012Max-Forwards: 70#015#012From: "UNET Monitoring" <sip:unet_monitoring_2@mvoip.nl>;tag=owXIO32VUqlzkLf98WxbHfRu98DPp5E4#015#012To: "UNET Monitoring" <sip:unet_monitoring_2@mvoi p.nl>#015#012Call-ID: yE9YajSE8uFZGTTe6XJnxztZNYnUM9ip#015#012CSeq: 61684 REGISTER#015#012Contact: <sip:kVMr6Z02ss@82.204.16.109:102622>#015#012 Expires: 300#015#012User-Agent: ag-projects/sipclient-0.3.0-pjsip-1.0-trunk#015#012Content-Length: 0#015#012#015#012> Jan 9 11:14:02 sip1 /usr/sbin/openser[12931]: ERROR:core:receive_msg: parse_msg failed

Reported by MichielLeenaars, 20 months ago.

The new way of building works great. However, under FreeBSD one needs to change 'make' into 'gmake' in setup_pjsip.py twice, as per attached. Otherwise the following error message occurs during the pjsip build process:

Fetching PJSIP from SVN repository

Using SVN revision 2421

Patching PJSIP

Configuring PJSIP

error: Got return value 2 while executing "make -f build/temp.freebsd-7.1-RELEASE-amd64-2.5/pjsip/build.mak -pR build/temp.freebsd-7.1-RELEASE-amd64-2.5/pjsip/build.mak", stderr output was: make: illegal option -- p