> However, existing code/applications do funny things with such memory > mapped regions (like writing one word, like relocating, like ....), so > we get these AVCs for them. But that's a different kind of execmod denial than others I've seen - I thought libs with text relocations all had this TEXTREL tag... [phantom@cobra ~]$ readelf -d /usr/lib/libSDL-1.2.so.0.7.0|grep TEXTREL 0x00000016 (TEXTREL) 0x0 -- Ivan Gyurdiev <ivg2@xxxxxxxxxxx> Cornell University