<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">2015-05-18 21:34 GMT+02:00 Stephen Smalley <span dir="ltr"><<a href="mailto:sds@tycho.nsa.gov" target="_blank">sds@tycho.nsa.gov</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Also, the most likely explanation for the scenario above is that the<br>
customer has the filesystem containing<br>
/opt/<product>/libexec/<executable> mounted with nosuid.<br>
</blockquote></div><br></div><div class="gmail_extra">The problem has been resolved for the customer, and your suspicion about the mount options was right!<br></div><div class="gmail_extra">/opt was mounted with nosuid.<br></div><div class="gmail_extra">Thanks a lot for your help! I think I've learned a lot about SELinux by this debug session.<br></div></div>