Re: selinux and legacy "compat" application in FC5

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Chris Jones wrote:
> Hi,
> 
> I am trying to get an application running in FC5 that was working in FC4. The 
> application is an old compat one (developed primarily on EL3 with gcc 
> 3.2.3...). When I run it I get a crash (see below). I believe the issue is 
> SELinux (and perhaps dlopen), as if I turn this to disabled (normally 
> enforcing) it runs fine. Also, with selinux on I get the message
> 
> Mar 28 00:10:03 localhost kernel: audit(1143501003.091:1143): avc:  denied  
> { execheap } for  pid=13048 comm="Boole.exe" 
> scontext=user_u:system_r:unconfined_t:s0 
> tcontext=user_u:system_r:unconfined_t:s0 tclass=process
> 
> I know jack all about selinux, but with rather if possible figure out how to 
> run this with it enabled rather than just disabling it. Can anyone give me 
> any pointers as to what I need to do - (Edit some selinux config policy ?)
> 

Look into the setsebool command and the allow_execheap boolean.

-- 
========================================================================
Ian Pilcher                                        i.pilcher@xxxxxxxxxxx
========================================================================


[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux