Selinux issues in user-compiled code

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jason L Tibbitts III wrote:
> A while back I made the decision to enable selinux on all of my user
> desktops.  It hasn't really been all that painful; generally the
> issues I have are with proprietary software, essentially all of which
> it seems has one issue or another.
> 
> This morning I received the following question from a user:
> 
> -----
> Can you explain why I often get a linker  error:
> 
> "cannot restore segment prot after reloc: Permission denied"
> 
> running code I've built in my home directory.But then if I rerun once
> or twice it will execute properly.  It's not always the same library
> that the linker complains about....
> -----
> 
> Unfortunately I don't really know how to answer.  I can handle selinux
> at a system level, because if I know some program has an issue I can
> just change a file context and things work.  But I've no idea how to
> deal with code that users might compile, or where to point them for
> info in writing code that doesn't have these issues.
> 
>  - J<
> 
> --
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
This means you have an execmod or execmem problem in your code.  You
might have a library that was build incorrectly missing -PIC ?

http://people.redhat.com/~drepper/selinux-mem.html
http://danwalsh.livejournal.com/6117.html


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkklvzQACgkQrlYvE4MpobO95wCgld4420fozCsyegcojTcYZiK+
Gj8AoNLYrDQPYpxdprJuHgryIwXrNKSE
=fx+2
-----END PGP SIGNATURE-----