Gentoo Archives: gentoo-hardened

From: Jan Meier <jan@×××××××××.org>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] SELinux problem -> avc: denied {execmem}
Date: Sun, 21 May 2006 16:50:45
Message-Id: 44709949.8090205@codejunky.org
In Reply to: Re: [gentoo-hardened] SELinux problem -> avc: denied {execmem} by Petre Rodan
1 Petre Rodan wrote:
2 > your binares might lack the GNU_STACK header, i.e. they were built with an old toolchain.
3 > use readelf --headers to find out if it's the case.
4 Executing: readelf -headers /bin/mount | grep GNU_STACK shows
5 "GNU_STACK 0x000000 0x00000000 0x00000000 0x00000 0x00000 RW 0x4"
6
7 > you might want to upgrade to the latest stable gcc and recompile all binaries with that header missing.
8 My gcc is version 3.4.5
9
10 >>When I execute `setenforce 1` I get a "Killed" after each command I execute,
11 >>does this have something to do with the denied messages?
12 > you should enforce only when your policy is ok for your purposes.
13 I am new to SELinux and currently reading the O'Reilly SELinux book to
14 gather more informations :)
15
16 Any suggestions to my problem?
17
18 Regards Jan
19 --
20 gentoo-hardened@g.o mailing list

Replies

Subject Author
Re: [gentoo-hardened] SELinux problem -> avc: denied {execmem} Petre Rodan <kaiowas@g.o>