selinux and legacy "compat" application in FC5
Ian Pilcher
i.pilcher at comcast.net
Mon Mar 27 23:44:46 UTC 2006
Chris Jones wrote:
> Hi,
>
> I am trying to get an application running in FC5 that was working in FC4. The
> application is an old compat one (developed primarily on EL3 with gcc
> 3.2.3...). When I run it I get a crash (see below). I believe the issue is
> SELinux (and perhaps dlopen), as if I turn this to disabled (normally
> enforcing) it runs fine. Also, with selinux on I get the message
>
> Mar 28 00:10:03 localhost kernel: audit(1143501003.091:1143): avc: denied
> { execheap } for pid=13048 comm="Boole.exe"
> scontext=user_u:system_r:unconfined_t:s0
> tcontext=user_u:system_r:unconfined_t:s0 tclass=process
>
> I know jack all about selinux, but with rather if possible figure out how to
> run this with it enabled rather than just disabling it. Can anyone give me
> any pointers as to what I need to do - (Edit some selinux config policy ?)
>
Look into the setsebool command and the allow_execheap boolean.
--
========================================================================
Ian Pilcher i.pilcher at comcast.net
========================================================================
More information about the fedora-list
mailing list