--- Paul Howarth <paul@xxxxxxxxxxxx> wrote: > On Thu, 2006-07-27 at 13:03 -0700, Bahram Alinezhad wrote: > > Thank you, it worked! But can you explain a bit more? I > couldn't understand anything from chcon's manual! > > The library is using memory in a way that is not allowed by > SELinux. A > detailed technical explanation is available here: > > http://people.redhat.com/drepper/selinux-mem.html > > By marking the .so file as one that uses memory in this way > (changing > its SELinux context type), the SELinux memory protection tests > are > turned off for that particular object, whilst leaving the > checks enabled > for everything else. > > The approach that some other people suggest is to turn off this > SELinux > memory protection altogether, using: > > # setsebool -P allow_execmod 1 > > This is clearly a much less secure approach and IMHO overkill. > > Paul. Thank you very much Paul. Bahram Alinezhad, Registered linux user #375283 (counter.li.org) Rudehen, Tehran, Iran. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
