Re: [Gcl-devel] Re: unexec and fedora core 4

[Eli Zaretskii]

> From: Camm Maguire <address@hidden>
> Date: 09 Dec 2005 16:43:44 -0500
> Cc: address@hidden, address@hidden, root <address@hidden>,
>       Matt Kaufmann <address@hidden>,
>       address@hidden, Sandip Ray <address@hidden>
> 
> OK, here is what I believe now to be the case -- the SELinux option
> allow_execmem, which is 'active' on the bad box, is causing the
> problem.  All is well if one takes the drastic action of 
> 
> sudo /bin/sh -c "/usr/sbin/setenforce 0"
> 
> but will probably allso work if one changes
> 
> /etc/selinux/strict/src/policy/domains/user.te:bool allow_execmem false;
> 
> to
> 
> /etc/selinux/strict/src/policy/domains/user.te:bool allow_execmem true;
> 
> and 
> 
> sudo /bin/sh -c "cd /etc/selinux/strict/src/policy && make load"
> 
> though I have not confirmed this not wanting to hose the machine in
> question. 

Should we add something along these lines to etc/PROBLEMS?