Is there a simple way to allow execmem for a single binary?

Bruno Wolff III bruno at wolff.to
Tue Jun 26 22:17:01 UTC 2007


I have a propietary app (iHEAT) that is getting execmem denials. I would
prefer to allow just this one app to be able to do that rather than disabling
the check for everything. I am using the targeted policy in Fedora 7.
I saw there was a context type unconfined_execmem, but that doesn't seem
to permit execution.

Is there some context I can use or perhaps I need to relabel a library and
not the executable?




More information about the fedora-selinux-list mailing list