Adam Goode <adam <at> spicenitz.org> writes:
> Now Fedora 9 tightens the default selinux booleans and by default
> mprotect with PROT_EXEC will fail. I want to fix MLton upstream to work
Ouch, executable stacks are evil, the only reason you got away with it until
now is that it is a custom stack being allocated that way (the system-allocated
stack falls under "execstack" which is already banned by SELinux, with few
exceptions).
> correctly. Should I special case systems that require PROT_EXEC? Or is
Maybe the GCC and glibc folks (Jakub Jelinek, Ulrich Drepper, ...) can tell you
more, but IMHO special-casing the broken systems is the right thing to do if
you want to get the patch upstream. For a quick fix, in Fedora, you should be
able to simply patch out the PROT_EXEC entirely, parisc isn't a Fedora
architecture anyway.
Kevin Kofler
--
fedora-devel-list mailing list
fedora-devel-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-devel-list
