-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On 08/29/2010 11:27 AM, Patrick Dupre wrote:
Hello,
With fedora 13, when I use Math:GSL, I get an error message: Can't load '/usr/local/lib/perl5/auto/Math/GSL/Errno/Errno.so' for module Math::GSL::Errno: /usr/local/lib/perl5/auto/Math/GSL/Errno/Errno.so: cannot restore segment prot after reloc: Permission denied at /usr/lib/perl5/DynaLoader.pm line 200.
if I do not switch SELinux to permissive !!
IE I cannot use enforcing
Ignoring the usual SELinux sucks/no it does not rant.
Patrick,
SELinux is noticing that Math:CSL has built libraries that require text relocation, and were not marked as such.
http://www.akkadia.org/drepper/selinux-mem.html
Explains the access check.
SELinux is all about labeling. Every process and file has a label and there are rules about how the processes and labels interact. When you have an SELinux problem, usually either the labeling is wrong or the rules are wrong.
http://danwalsh.livejournal.com/30837.html
In this case it looks like Math:CSL either built their libraries incorrectly or require code that triggers this access (Assemply)? So you have two choices either change the labels on the shared libraries to allow the access, using semanage fcontext ...
Or you can turn off the check altogether.
# setsebool -P allow_execmod 1