SELINUX

Daniel J Walsh dwalsh at redhat.com
Mon Aug 30 14:58:59 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 08/30/2010 08:12 AM, Patrick Dupre wrote:
> Hello,
> 
> Trying to install the intel compiler, I get:
> Your system is protected with Security-enhanced Linux (SELinux).
> We currently support only "Permissive" mode, which is
> not found on the system.
> To rectify this issue, you may either disable SELinux by
>        - setting the line "SELINUX=disabled" in your
> /etc/sysconfig/selinux file
>        - adding "selinux=0" kernel argument in lilo.conf or grub.conf files
> or make SELinux mode adjustment by
>        - setting the line "SELINUX=permissive" in your
> /etc/sysconfig/selinux file
> or ask your system administrator to make SELinux mode adjustment.
> 
> 
> Would ou just turn off SELINX ?
> I know I need to learn about SELinux !
> 
> Thank.
> 

Patrik I have no idea why Intel would require SELinux in permissive mode
to install.  Actually it might have something to do with the exec* checks.

If you turned off the execmod and execstack check, the intel compiler
should be able to install without any problems.

# setsebool allow_execstack=1 allow_execmod=1


I would bet that it will work without you setting it to permissive mode,
but you can temporarily set it to permissive mode by executing

# setenforce 0

Then install the package.

# setenforce 1

Puts the machine back into enforcing mode.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkx7xzMACgkQrlYvE4MpobPU4wCfS5Zs51YBIphWe0TFD+1awI9e
vUsAoLz2INe2bZmEzLOIk+Vj+gEe5o4p
=/kAB
-----END PGP SIGNATURE-----


More information about the users mailing list