Re: execmod avcs from today's policy

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



> However, existing code/applications do funny things with such memory
> mapped regions (like writing one word, like relocating, like ....), so
> we get these AVCs for them.

But that's a different kind of execmod denial than others I've seen - 
I thought libs with text relocations  all had this TEXTREL tag...

[phantom@cobra ~]$ readelf -d /usr/lib/libSDL-1.2.so.0.7.0|grep TEXTREL
 0x00000016 (TEXTREL)                    0x0


-- 
Ivan Gyurdiev <ivg2@xxxxxxxxxxx>
Cornell University


[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux