[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: selinux and legacy "compat" application in FC5



Chris Jones wrote:
> Hi,
> 
> I am trying to get an application running in FC5 that was working in FC4. The 
> application is an old compat one (developed primarily on EL3 with gcc 
> 3.2.3...). When I run it I get a crash (see below). I believe the issue is 
> SELinux (and perhaps dlopen), as if I turn this to disabled (normally 
> enforcing) it runs fine. Also, with selinux on I get the message
> 
> Mar 28 00:10:03 localhost kernel: audit(1143501003.091:1143): avc:  denied  
> { execheap } for  pid=13048 comm="Boole.exe" 
> scontext=user_u:system_r:unconfined_t:s0 
> tcontext=user_u:system_r:unconfined_t:s0 tclass=process
> 
> I know jack all about selinux, but with rather if possible figure out how to 
> run this with it enabled rather than just disabling it. Can anyone give me 
> any pointers as to what I need to do - (Edit some selinux config policy ?)
> 

Look into the setsebool command and the allow_execheap boolean.

-- 
========================================================================
Ian Pilcher                                        i pilcher comcast net
========================================================================


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]