Re: SELinux and execheap
Andrea Musuruane wrote:
2008/8/27 Hans de Goede <j.w.r.degoede(a)hhs.nl>:
>> Any idea what is wrong?
> No,
>
> But can you try the following:
> ls -Z /usr/bin/uae
>
> And if that does not show unconfined_execmem_exec_t, then the scriptlets are
> not working for some reason.
It does show unconfined_execmem_exec_t. uae is the binary - there is
no wrapper.
I do think that unconfined_execmem_exec_t is not the right context.
But I cannot find a good one. I don't even know if a good one
exists...
Try java_exec_t, otherwise try making it require an executable stack by doing:
execstack -s /usr/bin/uae
And combine that with either unconfined_execmem_exec_t or java_exec_t, it has
been a while for me, but in my memory requiring an executable stack (and
changing the type to allow this) sometimes helped with programs which need an
executable heap.
Regards,
Hans