New Policy Doesn't Fix It

[Daniel J Walsh]

Daniel Normolle wrote:

> Hello, All,
>
> I am running kernel 2.6.11-1.27_FC3.  I had disabled SELinux two
> policies ago because it caused two applications I depend on,
> Open Office and SAS, from launching.  I relabeled the disk, turned
> SELinux back on, and updated with today's new, improved policy.
> My situation is unchanged,  launching SAS generates this message:
>
> Jun 16 12:50:49 kernel: audit(1118940649.944:0): avc:  denied  { 
> execmod } for  pid=5124 comm=sas 
> path=/usr/local/SAS/SAS_9.1/sasexe/saswzx dev=dm-0 ino=5134594 
> scontext=user_u:system_r:unconfined_t tcontext=root:object_r:usr_t 
> tclass=file
>
> Launching open office generates this message:
>
> Jun 16 12:51:01 kernel: audit(1118940661.113:0): avc:  denied  { 
> execmod } for  pid=5152 comm=soffice.bin 
> path=/opt/openoffice.org1.9.104/program/libicudata.so.26.0.1 dev=dm-0 
> ino=4728657 scontext=user_u:system_r:unconfined_t 
> tcontext=system_u:object_r:usr_t tclass=file
>
> Please let me know if you have sage advice or further questions.  Be
> specific, SELinux is the NEW WORLD for me.
>
> Regards, dpn
>
> -- 
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> http://www.redhat.com/mailman/listinfo/fedora-selinux-list

Are you sure you have allow_execmod set?

setsebool -P allow_execmod=1

--