Hi, I am running on FC4 and I installed Cisco VPN client software, however when I run vpnclient I am getting the error message : <pre><tt>"vpnclient: error while loading shared libraries: /opt/cisco-vpnclient/lib/libvpnapi.so: cannot restore segment prot after reloc: Permission denied" </tt></pre> Friendly neighbourhood Paul Howarth correctly guessed it to be related to SELinux. I am able to run the vpnclient by disabling the SELinux using setenforce 0 The chcon command did not work (apparently it is not supposed to work in FC4) I get a error message "type=AVC msg=audit(1147460693.437:11955217): avc: denied { execmod } " <pre>if I disable selinux and run the vpnclient command. <tt>> Paul Howarth wrote : > > The memory checks are present in FC4 but disabled by default. It > > appears > > that they have somehow been enabled on your system. This should fix it: > > # setsebool -P allow_execmod 1 > > I gave this command and it still does not work with > SELinux. So digged a littlebit and gave the command > # getsebool -a | less > and I got a long output of which I took the ones that might > make sense to you - > allow_execmem --> active > allow_execmod --> active > allow_execstack --> active > allow_kerberos --> active > allow_write_xshm --> active > allow_ypbind --> active </tt><tt>>> There's something very weird going on there. allow_execmod should do >> what it says. I'd try asking about this on fedora-selinux-list,</tt> setsebool with execmod is not working either. I have attached the relevant files as well. Any ideas ? This should give you an idea of the SELinux version <tt>> selinux-doc-1.19.5-1.noarch.rpm > selinux-policy-strict-1.23.16-6.noarch.rpm > selinux-policy-targeted-1.23.16-6.noarch.rpm </tt> Thanks Newbie Yukku </pre> <hr size=1>New Yahoo! Messenger with Voice. <a href="http://us.rd.yahoo.com/mail_us/taglines/postman5/*http://us.rd.yahoo.com/evt=39666/*http://messenger.yahoo.com">Call regular phones from your PC</a> and save big.