Gentoo Archives: gentoo-hardened

From: Petre Rodan <kaiowas@g.o>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] SELinux problem -> avc: denied {execmem}
Date: Mon, 22 May 2006 06:08:26
Message-Id: 20060522060427.GA7073@peter.avira.local
In Reply to: Re: [gentoo-hardened] SELinux problem -> avc: denied {execmem} by Jan Meier
1 Hi,
2
3 On Sun, May 21, 2006 at 11:40:15PM +0200, Jan Meier wrote:
4 > Am Sonntag 21 Mai 2006 20:31 schrieb Petre Rodan:
5 > > On Sun, May 21, 2006 at 07:46:01PM +0200, Jan Meier wrote:
6 > > > Petre Rodan wrote:
7 > > > >your binares might lack the GNU_STACK header, i.e. they were built with
8 > > > > an old toolchain.
9 > > > >use readelf --headers to find out if it's the case.
10 > > >
11 > > > Executing: readelf -headers /bin/mount | grep GNU_STACK shows "GNU_STACK
12 > > > 0x000000 0x00000000 0x00000000 0x00000 0x00000 RW 0x4"
13 > >
14 > > how about /sbin/runscript, /sbin/init, /bin/bash?
15 > Same result, GNU_STACK is in the header.
16
17 strange. please file a bug report and make sure you include emerge --info in it.
18
19 do you have a new gentoo setup there or did you migrate an old install?
20
21 > > > >you might want to upgrade to the latest stable gcc and recompile all
22 > > > > binaries with that header missing.
23 > > >
24 > > > My gcc is version 3.4.5
25 > >
26 > > I presume that 'gcc-config -l' also shows that you're actually using it?
27 > gcc-config shows that I am using 3.4.5 :)
28
29 just checking :)
30
31 cheers,
32 peter

Replies

Subject Author
Re: [gentoo-hardened] SELinux problem -> avc: denied {execmem} pageexec@××××××××.hu
Re: [gentoo-hardened] SELinux problem -> avc: denied {execmem} Jan Meier <jan@×××××××××.org>