Re: execstack and execmem

[Dominick Grift]

On Fri, Apr 09, 2010 at 08:36:39PM +0900, Shintaro Fujiwara wrote:
>  Hi, I'm recently working on F12 web server and I got httpd_t
> execstack
>  and execmem.
>  Can I allow those ?
>  The server I'm woking on right now is a test server which have copied
>  all the contents from FC6 which I have move on permissive mode for
>  half a year.
>  I have not read a log at all on FC6 server.
>  I'm trying to move all the contents that I have now on F12.
>  I already succeeded another web server which has no script stuff so
>  the problem may caused by the script which I have written for certain
>  web-pages.
>  
>  The server I'm working I can't touch couple of days, but some script I
>  wrote wants to do that, I guess.
>  The script has a type httpd_sys_content_t still, so that may be a problem.
>  Yes, it's in the documentroot of Apache.
>  
>  Maybe I should put the script outside of documentroot or label other
>  than httpd stuff with local.pp.
>  
>  I could not have time to read that thouroughly, but I can report on Monday.
>  
>  I will report this matter till I get the right answer and I run the
>  server right. 
Could you enclose avc denials of the particular events please? You may have mislabelled
files, as you suggested yourself.

>  
>  Thanks in advance.
>  -------------------------------------------
>  segatex--SELinux tool
>  
>  http://sourceforge.net/projects/segatex/
>  --
>  selinux mailing list
>  selinux(a)lists.fedoraproject.org
>  https://admin.fedoraproject.org/mailman/listinfo/selinux