Re: SELinux

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 08/29/2010 11:27 AM, Patrick Dupre wrote:
> Hello,
> 
> With fedora 13, when I use Math:GSL, I get an error message:
>  Can't load '/usr/local/lib/perl5/auto/Math/GSL/Errno/Errno.so' for
> module Math::GSL::Errno:
> /usr/local/lib/perl5/auto/Math/GSL/Errno/Errno.so: cannot restore
> segment prot after reloc: Permission denied at
> /usr/lib/perl5/DynaLoader.pm line 200.
> 
> if I do not switch SELinux to permissive !!
> 
> IE I cannot use enforcing
> 
Ignoring the usual SELinux sucks/no it does not rant.

Patrick,

SELinux is noticing that Math:CSL has built libraries that require text
relocation, and were not marked as such.

http://www.akkadia.org/drepper/selinux-mem.html

Explains the access check.

SELinux is all about labeling.  Every process and file has a label and
there are rules about how the processes and labels interact.  When you
have an SELinux problem, usually either the labeling is wrong or the
rules are wrong.

http://danwalsh.livejournal.com/30837.html

In this case it looks like Math:CSL either built their libraries
incorrectly or require code that triggers this access (Assemply)?  So
you have two choices either change the labels on the shared libraries to
allow the access, using semanage fcontext ...

Or you can turn off the check altogether.

# setsebool -P allow_execmod 1


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkx7peQACgkQrlYvE4MpobPdWgCdFNZJss347mwn4b9izV7R6jjD
60gAniyBTHo+TzwOJdc3OEzD2xXb4pyV
=+0xU
-----END PGP SIGNATURE-----
-- 
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines

[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [EPEL Devel]     [Fedora Magazine]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Desktop]     [Fedora Fonts]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Fedora Sparc]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux