Re: SELinux

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 08/29/2010 11:27 AM, Patrick Dupre wrote:
> Hello,
> 
> With fedora 13, when I use Math:GSL, I get an error message:
>  Can't load '/usr/local/lib/perl5/auto/Math/GSL/Errno/Errno.so' for
> module Math::GSL::Errno:
> /usr/local/lib/perl5/auto/Math/GSL/Errno/Errno.so: cannot restore
> segment prot after reloc: Permission denied at
> /usr/lib/perl5/DynaLoader.pm line 200.
> 
> if I do not switch SELinux to permissive !!
> 
> IE I cannot use enforcing
> 
Ignoring the usual SELinux sucks/no it does not rant.

Patrick,

SELinux is noticing that Math:CSL has built libraries that require text
relocation, and were not marked as such.

http://www.akkadia.org/drepper/selinux-mem.html

Explains the access check.

SELinux is all about labeling.  Every process and file has a label and
there are rules about how the processes and labels interact.  When you
have an SELinux problem, usually either the labeling is wrong or the
rules are wrong.

http://danwalsh.livejournal.com/30837.html

In this case it looks like Math:CSL either built their libraries
incorrectly or require code that triggers this access (Assemply)?  So
you have two choices either change the labels on the shared libraries to
allow the access, using semanage fcontext ...

Or you can turn off the check altogether.

# setsebool -P allow_execmod 1


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkx7peQACgkQrlYvE4MpobPdWgCdFNZJss347mwn4b9izV7R6jjD
60gAniyBTHo+TzwOJdc3OEzD2xXb4pyV
=+0xU
-----END PGP SIGNATURE-----
-- 
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux