Re: execmem/execstack AVCs in recent updates

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 11/13/06, Tom London <selinux@xxxxxxxxx> wrote:
On 11/13/06, Daniel J Walsh <dwalsh@xxxxxxxxxx> wrote:
> Could you open a bugzilla on this for firefox.
Yup: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=215424
> >
> > Also, vmware is still unhappy :-(
> What is it complaining about?
type=AVC msg=audit(1163450320.414:32): avc:  denied  { execstack } for
 pid=3763 comm="ld-linux.so.2"
scontext=user_u:system_r:unconfined_t:s0
tcontext=user_u:system_r:unconfined_t:s0 tclass=process
type=SYSCALL msg=audit(1163450320.414:32): arch=40000003 syscall=125
success=yes exit=0 a0=bfef2000 a1=1000 a2=1000007 a3=fffff000 items=0
ppid=3761 pid=3763 auid=500 uid=500 gid=500 euid=500 suid=500
fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="ld-linux.so.2"
exe="/lib/ld-2.5.90.so" subj=user_u:system_r:unconfined_t:s0
key=(null)


Actually, execmem is generated also.....

type=AVC msg=audit(1163430106.494:54): avc:  denied  { execstack } for
pid=3462 comm="ld-linux.so.2"
scontext=user_u:system_r:unconfined_t:s0
tcontext=user_u:system_r:unconfined_t:s0 tclass=process
type=AVC msg=audit(1163430106.494:54): avc:  denied  { execmem } for
pid=3462 comm="ld-linux.so.2" scontext=user_u:system_r:unconfined_t:s0
tcontext=user_u:system_r:unconfined_t:s0 tclass=process
type=SYSCALL msg=audit(1163430106.494:54): arch=40000003 syscall=125
success=yes exit=0 a0=bfd55000 a1=1000 a2=1000007 a3=fffff000 items=0
ppid=3460 pid=3462 auid=500 uid=500 gid=500 euid=500 suid=500
fsuid=500 egid=500 sgid=500 fsgid=500 tty=pts1 comm="ld-linux.so.2"
exe="/lib/ld-2.5.90.so" subj=user_u:system_r:unconfined_t:s0
key=(null)
--
Tom London

--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux