Re: strict policy problem
Stephen Smalley wrote:
On Mon, 2005-10-03 at 23:16 -0400, Richard Hally wrote:
>Perhaps someone who understands the problem and possibly the solution
>and which package to file against could help us out here?
I'd file it against firefox, as that owns the .so files that are
triggering these denials. Someone needs to look at the build process
and code for those .so files to determine why they presently require
text relocations and how to fix them.
Perhaps it would be appropriate to reevaluate the implementation
strategy for this particular "feature" of SELinux.
If there is no coherent, concise, convincing explanation provided to the
people who need to make changes to their software to conform to the
requirements of this "feature" then there isn't much hope of them doing
what is required. Since this "feature" was implemented many months ago
and these problems are still appearing please consider filing bugs with
the appropriate explanation so that the appropriate people can make the
required changes.
Thanks,
Richard Hally