Daniel J Walsh
dwalsh at redhat.com
Mon Aug 30 12:36:52 UTC 2010
-----BEGIN PGP SIGNED MESSAGE-----
On 08/29/2010 11:27 AM, Patrick Dupre wrote:
> With fedora 13, when I use Math:GSL, I get an error message:
> Can't load '/usr/local/lib/perl5/auto/Math/GSL/Errno/Errno.so' for
> module Math::GSL::Errno:
> /usr/local/lib/perl5/auto/Math/GSL/Errno/Errno.so: cannot restore
> segment prot after reloc: Permission denied at
> /usr/lib/perl5/DynaLoader.pm line 200.
> if I do not switch SELinux to permissive !!
> IE I cannot use enforcing
Ignoring the usual SELinux sucks/no it does not rant.
SELinux is noticing that Math:CSL has built libraries that require text
relocation, and were not marked as such.
Explains the access check.
SELinux is all about labeling. Every process and file has a label and
there are rules about how the processes and labels interact. When you
have an SELinux problem, usually either the labeling is wrong or the
rules are wrong.
In this case it looks like Math:CSL either built their libraries
incorrectly or require code that triggers this access (Assemply)? So
you have two choices either change the labels on the shared libraries to
allow the access, using semanage fcontext ...
Or you can turn off the check altogether.
# setsebool -P allow_execmod 1
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
-----END PGP SIGNATURE-----
More information about the users