GIMP help shouldn't need execstack, should it?

Dominick Grift domg472 at gmail.com
Fri Jan 7 14:11:41 UTC 2011


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 01/06/2011 11:49 PM, Göran Uddeborg wrote:
> I discovered recently that gimp help crashes with a segmentation fault
> and an execmem AVC denial.  I could make it work either by setting
> allow_execstack to on, or by changing the type of
> /usr/lib64/gimp/2.0/plug-ins/help-browser to
> unconfined_execmem_exec_t.

see if it works when you remove the execstack flag from help-browser
(man execstack)

But in general i believe execstack should most of the time not be needed
in Linux

> I assume this is a bug in the help-browser that I should report.  My
> understanding is that execstack should not be needed.  But before I do
> I thought I check with the knowledgable people here.  Is this AVC
> denial a result of an application bug, or could it be valid for gimp
> help to request this?
> 
> 
> 
> --
> selinux mailing list
> selinux at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/selinux

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAk0nHx0ACgkQMlxVo39jgT8DwACffPV7SUh89Jg67i+fpnDtIkG/
QRAAn1Z710R2xL2//pj7FD++xMhH4lCR
=2YLt
-----END PGP SIGNATURE-----


More information about the selinux mailing list