realplayer

Stephen Smalley sds at epoch.ncsc.mil
Wed Oct 27 18:59:20 UTC 2004


On Wed, 2004-10-27 at 14:42, Tom London wrote:
> 'execstack -c' didn't seem to work, at least on realplay.bin:
> [root at fedora RealPlayer]# execstack -c realplay.bin
> execstack: realplay.bin: Reshuffling of objects to make room for
> program header entry only supported for shared libraries
> [root at fedora RealPlayer]# execstack -q realplay.bin                             
> ? realplay.bin
> [root at fedora RealPlayer]# 
> 
> Is the best we can do to flag this in the
> release notes, etc.?  

Probably.  Or ask the provider to rebuild it with a modern toolchain. 
One could write a simple domain for such legacy binaries that allows
wider execute access for them.

-- 
Stephen Smalley <sds at epoch.ncsc.mil>
National Security Agency




More information about the fedora-selinux-list mailing list