SELinux and Wine

[Stephen Smalley]

On Tue, 2009-08-04 at 14:57 -0400, Ryan Gandy wrote:
> Hello,
> 
> I use FC11 64 bit and have the default (add/remove software)
> installation for both SELinux and Wine.  I've been trying to get my
> Windows programs to run but see entries in my setroubleshoot log
> regarding Wine not being cleared for "allow_execmem" or "mmap_zero."
> I'm not that experienced with it, but I gather enabling either of
> these would be a bad thing from what I've already seen on google.  Is
> there a way I can get Wine to run without effectively disabling
> SELinux?

Post the actual avc denials.  wine_t should already have the necessary
permissions.  Sounds like you are running wine in unconfined_t instead?

-- 
Stephen Smalley
National Security Agency