Gentoo Archives: gentoo-hardened

From: Antoine Martin <antoine@××××××××××.uk>
To: gentoo-hardened@l.g.o
Cc: SELinux <selinux@×××××××××.gov>
Subject: Re: [gentoo-hardened] mysql 4.1 requires shlib_t:file execmod?
Date: Sat, 22 Oct 2005 15:48:20
Message-Id: 1129995939.31615.56.camel@localhost.localdomain
In Reply to: Re: [gentoo-hardened] mysql 4.1 requires shlib_t:file execmod? by pageexec@freemail.hu
1 On Sat, 2005-10-22 at 16:53 +0200, pageexec@××××××××.hu wrote:
2 > On 22 Oct 2005 at 15:15, Antoine Martin wrote:
3 > > I've upgraded a (gentoo x86 selinux) system from MySQL 4.0 to 4.1, and
4 > > since then some of the software that uses mysql-libs refuse to run
5 > > without 'shlib_t:file execmod'.
6 > >
7 > > ie: when starting postfix (built and rebuilt with mysql support):
8 > > postfix: error while loading shared
9 > > libraries: /usr/lib/libmysqlclient.so.14: cannot restore segment prot
10 > > after reloc: Permission denied
11 >
12 > the reason might be text relocations, even though they should have
13 > been fixed already upstream. see long story at
14 >
15 > http://bugs.gentoo.org/show_bug.cgi?id=42968
16 > http://bugs.mysql.com/bug.php?id=11642
17 >From the two threads above it looks like the fix should have gone in
18 4.1.14 (which is what I am running now)
19
20 >
21 > what does scanelf -T /usr/lib/libmysqlclient.so.14 report?
22 > if it's not text relocs, then post an strace please.
23 Is scanelf a PaX tool?
24
25 Antoine
26
27 --
28 gentoo-hardened@g.o mailing list

Replies

Subject Author
Re: [gentoo-hardened] mysql 4.1 requires shlib_t:file execmod? pageexec@××××××××.hu