<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/3.16.3">
<TITLE>Re: [F8] (Re)Starting httpd reveals php pdf.so stack permission errors...</TITLE>
</HEAD>
<BODY>
<BR>
On Mon, 2008-02-18 at 12:32 -0800, Daniel J Walsh wrote:<BR>
<BLOCKQUOTE TYPE=CITE>
<FONT SIZE="2"><FONT COLOR="#000000">-----BEGIN PGP SIGNED MESSAGE-----</FONT></FONT><FONT COLOR="#000000"> </FONT><BR>
<FONT SIZE="2"><FONT COLOR="#000000">Hash: SHA1</FONT></FONT><BR>
<BR>
<FONT SIZE="2"><FONT COLOR="#000000">Daniel B. Thurman wrote:</FONT></FONT><FONT COLOR="#000000"> </FONT><BR>
<FONT SIZE="2"><FONT COLOR="#000000">> On Mon, 2008-02-18 at 06:31 -0800, Daniel J Walsh wrote:</FONT></FONT><FONT COLOR="#000000"> </FONT><BR>
<FONT SIZE="2"><FONT COLOR="#000000">> </FONT></FONT><BR>
<FONT SIZE="2"><FONT COLOR="#000000">>> execstack -c /usr/lib/php/modules/pdf.so</FONT></FONT><FONT COLOR="#000000"> </FONT><BR>
<FONT SIZE="2"><FONT COLOR="#000000">> </FONT></FONT><BR>
<FONT SIZE="2"><FONT COLOR="#000000">> </FONT></FONT><BR>
<FONT SIZE="2"><FONT COLOR="#000000">> I tried it. No change.</FONT></FONT><FONT COLOR="#000000"> </FONT><BR>
<FONT SIZE="2"><FONT COLOR="#000000">> </FONT></FONT><BR>
<FONT SIZE="2"><FONT COLOR="#000000">> </FONT></FONT><BR>
<FONT SIZE="2"><FONT COLOR="#000000">Ok you can add this rule via audit2allow</FONT></FONT><BR>
<BR>
<FONT SIZE="2"><FONT COLOR="#000000"># grep execstack /var/log/audit/audit.log | audit2allow -m myphp</FONT></FONT><FONT COLOR="#000000"> </FONT><BR>
<FONT SIZE="2"><FONT COLOR="#000000"># semodule -i myphp.pp</FONT></FONT><BR>
<BR>
<FONT SIZE="2"><FONT COLOR="#000000">But you should report this as a bug against /usr/lib/php/modules/pdf.so</FONT></FONT><BR>
<BR>
<FONT SIZE="2"><FONT COLOR="#000000">Attach this link</FONT></FONT><BR>
</BLOCKQUOTE>
<BR>
Uh, I did the following steps:<BR>
<BR>
1) execstack -c /usr/lib/php/modules/pdf.so<BR>
<nothing><BR>
2) grep execstack /var/log/audit/audit.log | grep audit2allow -m myphp<BR>
grep: invalid max count<BR>
3) semodule -i myphp.pp<BR>
semodule: Could not read file 'myphp.pp': No such file or directory<BR>
<BR>
Somehow, this is not what you wanted?<BR>
<BR>
</BODY>
</HTML>