Hi,<br> I am running on FC4 and I installed Cisco VPN client software, however when I run vpnclient I am getting the error message :<br> <pre><tt>"vpnclient: error while loading shared libraries: /opt/cisco-vpnclient/lib/libvpnapi.so: cannot restore segment prot after reloc: Permission denied"<br></tt></pre> Friendly neighbourhood Paul Howarth correctly guessed it to be related to SELinux.<br> I am able to run the vpnclient by disabling the SELinux using <br> setenforce 0<br> The chcon command did not work (apparently it is not supposed to work in FC4)<br> <span style="font-family: monospace;">I get a error message "</span>type=AVC msg=audit(1147460693.437:11955217): avc: denied { execmod } "<br> <pre>if I disable selinux and run the vpnclient command.<br><tt>> Paul Howarth wrote :<br>> > The memory checks are present in FC4 but disabled by default. It <br>> > appears<br>> > that they have somehow been enabled on your system.
This should fix <br>it:<br>> > # setsebool -P allow_execmod 1<br>> <br>> I gave this command and it still does not work with<br>> SELinux. So digged a littlebit and gave the command<br>> # getsebool -a | less<br>> and I got a long output of which I took the ones that might<br>> make sense to you -<br>> allow_execmem --> active<br>> allow_execmod --> active<br>> allow_execstack --> active<br>> allow_kerberos --> active<br>> allow_write_xshm --> active<br>> allow_ypbind --> active<br></tt><tt>>> There's something very weird going on there. allow_execmod should do<br>>> what it says. I'd try asking about this on fedora-selinux-list,</tt><br><br><span style="font-family: monospace;"></span>setsebool with execmod is not working either.<br>I have attached the relevant files as well. Any ideas ?<br>This should give you an idea of the SELinux version<br><tt>> selinux-doc-1.19.5-1.noarch.rpm<br>>
selinux-policy-strict-1.23.16-6.noarch.rpm<br>> selinux-policy-targeted-1.23.16-6.noarch.rpm<br></tt><br>Thanks<br>Newbie Yukku<br><br></pre><p>
<hr size=1>New Yahoo! Messenger with Voice. <a href="http://us.rd.yahoo.com/mail_us/taglines/postman5/*http://us.rd.yahoo.com/evt=39666/*http://messenger.yahoo.com">Call regular phones from your PC</a> and save big.