On Wed, 2006-03-29 at 14:43 -0800, Florin Andrei wrote: > On Wed, 2006-03-29 at 23:18 +0100, Paul Howarth wrote: > > On Wed, 2006-03-29 at 13:47 -0800, Florin Andrei wrote: > > > > SELinux does log a few things, but it says "granted" which is why > > > glxgears works. > > > Perhaps you have the booleans allow_execmem and allow_execmod on? > > # getsebool -a | grep -e execmem -e execmod > allow_execmem --> on > allow_execmod --> on > > Isn't that the default? I know I tweaked a few things, but I don't > think I changed those. > I could be wrong, though. Not sure; all my FC5 systems are upgrades from FC4 so I don't have a clean install to check against. They all have the following though: allow_execheap --> off allow_execmem --> on allow_execmod --> off allow_execstack --> on allow_java_execstack --> off Paul.
