Another "execstack" (AviDemux)

Miroslav Grepl mgrepl at redhat.com
Fri Jan 7 15:14:04 UTC 2011


On 01/07/2011 11:27 AM, Dominick Grift wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 01/07/2011 03:27 AM, Jorge Fábregas wrote:
>> Hi,
>>
>> I'm running Fedora 14 (finally) and I'm getting also an "execstack" AVC
>> while running the Avidemux video editor.
>>
>> I followed the suggestions on the SELinux Alert Browser and just
>> copied/pasted the recommended commands to create the local policy:
>>
>> # grep /usr/bin/avidemux2_gtk /var/log/audit/audit.log | audit2allow -M
>> mypol
>> # semodule -i mypol.pp
>>
>> ..but when I run the first line I get:
>>
>> compilation failed:
>> mypol.te:6:ERROR 'syntax error' at token '' on line 6:
>>
>> /usr/bin/checkmodule:  error(s) encountered while parsing configuration
>> /usr/bin/checkmodule:  loading policy configuration from mypol.te
Yes, this is a bug which should be fixed in the latest 
setroubleshoot-plugin package.
>> Should I open a bug for this issue as well for the execstack one even
>> though is a package from RPM Fusion ?
>>
>> The system is totally updated (as of Jan 6th, 2011).
We have the following bug for the execstack issue where you can find 
instructions

https://bugzilla.redhat.com/show_bug.cgi?id=652297

> See if this executable file still works when you remove the execstack
> flag with the execstack command (see man execstack)
>
> I believe these execstack issues generally are bugs and should be
> reported/fixed.
>
>> --
>> Jorge
>> --
>> selinux mailing list
>> selinux at lists.fedoraproject.org
>> https://admin.fedoraproject.org/mailman/listinfo/selinux
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.16 (GNU/Linux)
> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAk0m6nkACgkQMlxVo39jgT8GPACgz+41ibzSPOpDLJAMrF8pDiHL
> UJgAoJBV2hQ7Sr5CvHIAwWTfUUdPkFDG
> =WYZI
> -----END PGP SIGNATURE-----
> --
> selinux mailing list
> selinux at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/selinux



More information about the selinux mailing list