Please disable the SELinux execstack/relro checks before FC5 final

Daniel J Walsh dwalsh at redhat.com
Mon Feb 20 20:55:38 UTC 2006


Anyways I think I will go with allow_execmem allow_execstack for FC5 on 
by default, all confined domains will not have this ability.  For FC6 we 
will turn them off again but add a new unconfined type for 
firefox/thunderbird/evolution and freinds which will
only allow them to use execstack.  When ever you find an library that 
requires these privs please bugzilla them.

Dan




More information about the devel mailing list