Adding two new booleans to httpd to tighten it's security.

Ulrich Drepper drepper at redhat.com
Sat Dec 10 21:44:27 UTC 2005


Nicolas Mailhot wrote:
> Rawhide killed evo a week ago (#174931)
> It killed thunderbird today
> I'm running out of imap clients.

Just add appropriate security labels.

for f in /usr/lib/thunderbird-1.5/*.so /usr/lib/thunderbird-1.5/*/*.so; 
do if readelf -d $f | fgrep -q TEXTREL; then chcon 
system_u:object_r:texrel_shlib_t $f; fi; done


(One long line.)  Repeat for other directories.

This specific problem is a gcc bug.

-- 
➧ Ulrich Drepper ➧ Red Hat, Inc. ➧ 444 Castro St ➧ Mountain View, CA ❖




More information about the selinux mailing list