[prev in list] [next in list] [prev in thread] [next in thread] 

List:       fedora-selinux-list
Subject:    Re: 3rd party shared objects won't work without disabling SELinux
From:       Lonni J Friedman <netllama () gmail ! com>
Date:       2006-01-26 17:08:25
Message-ID: 7c1574a90601260908m5f00bbe5s1328ded985d6ce82 () mail ! gmail ! com
[Download RAW message or body]

On 1/26/06, Stephen Smalley <sds@tycho.nsa.gov> wrote:
> On Wed, 2006-01-25 at 16:16 -0800, Lonni J Friedman wrote:
> > Hello,
> > I'm working on an application that requires 3rd party (outside of what
> > ships with FC) shared libraries.  With FC4, I'm not having any
> > problems.  Up until just a few days ago, everything was working in
> > FC5-test2 as well.
> >
> > However it seems that some update suddenly broke things in such a way
> > that unless I completely disable SELinux, I cannot load/access the
> > shared objects that I installed.  When I attempt to do so, I get the
> > following error:
> > cannot enable executable stack as shared object requires: Permission denied
> >
> > Can someone point out what SELinux foo I might be missing here?
>
> For discussion of the same issue for another application and DSO, see:
> https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=178924
> and
> https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=170187
>
> Can you run 'execstack -c' on the shared object?  If that succeeds, does

well, yes & no.  It seems to fix one problem, but then causes another.

> the program then work?  Also, check your /var/log/audit/audit.log for
> any other AVC denials.

Thanks, this gives me enough info to have a starting point to work on
this further.  I'll speak up if I have more questions/problems that I
can't figure out.

-Lonni

--
fedora-selinux-list mailing list
fedora-selinux-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-selinux-list
[prev in list] [next in list] [prev in thread] [next in thread]