realplayer

[Russell Coker]

On Thu, 28 Oct 2004 00:50, Stephen Smalley <sds at epoch.ncsc.mil> wrote:
> On Wed, 2004-10-27 at 10:39, Russell Coker wrote:
> > On Sat, 23 Oct 2004 02:13, Tom London <selinux at gmail.com> wrote:
> > > mmap2(NULL, 365, PROT_READ, MAP_PRIVATE, 3, 0) = -1 EACCES (Permission
> > > denied) close(3)                                = 0
> > > --- SIGSEGV (Segmentation fault) @ 0 (0) ---
> > > +++ killed by SIGSEGV +++
> > >
> > > Is this related to the previously reported (and fixed, I thought)
> > > mmap() problem?   Something else?
> >
> > Looks like the mmap() problem.  What kernel version are you running?
>
> Legacy binaries have their mmap(PROT_READ) requests translated to
> PROT_READ|PROT_EXEC automatically by the kernel for backward
> compatibility.  Not an SELinux issue; SELinux is just checking
> permissions based on what is being passed to it by the core kernel.

So what is the solution?

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page