SELinux for mock

Piscium groknok at gmail.com
Tue May 3 19:47:49 UTC 2011


On 3 May 2011 20:36, Daniel J Walsh <dwalsh at redhat.com> wrote:

big snip

>> #============= unconfined_t ==============
>> #!!!! This avc can be allowed using the boolean 'allow_execstack'
>>
>> allow unconfined_t self:process execstack;
>
>
>
> You should report this as a bug in gcc.

You mean _glibc_?

Anyway, I am pasting below an excerpt of the build log that shows the
errors more likely related to the SELinux alert:

/builddir/build/BUILD/glibc-2.13/build-i686-linuxnptl-nosegneg/elf/tst-tls9-static.o:
In function `do_test':
/builddir/build/BUILD/glibc-2.13/elf/tst-tls9.c:16: warning: Using
'dlopen' in statically linked applications requires at runtime the
shared libraries from the glibc version used for linking
make[2]: *** [/builddir/build/BUILD/glibc-2.13/build-i686-linuxnptl-nosegneg/elf/tst-execstack.out]
Error 1
/builddir/build/BUILD/glibc-2.13/build-i686-linuxnptl-nosegneg/elf/tst-execstack-needed:
error while loading shared libraries:
/builddir/build/BUILD/glibc-2.13/build-i686-linuxnptl-nosegneg/elf/tst-execstack-mod.so:
cannot enable executable stack as shared object requires: Permission
denied
make[2]: *** [/builddir/build/BUILD/glibc-2.13/build-i686-linuxnptl-nosegneg/elf/tst-execstack-needed.out]
Error 127
/builddir/build/BUILD/glibc-2.13/build-i686-linuxnptl-nosegneg/elf/tst-execstack-prog:
error while loading shared libraries:
/builddir/build/BUILD/glibc-2.13/build-i686-linuxnptl-nosegneg/elf/tst-execstack-prog:
cannot enable executable stack as shared object requires: Permission
denied
make[2]: *** [/builddir/build/BUILD/glibc-2.13/build-i686-linuxnptl-nosegneg/elf/tst-execstack-prog.out]
Error 127
make[2]: Target `tests' not remade because of errors.
make[2]: Leaving directory `/builddir/build/BUILD/glibc-2.13/elf'
make[1]: *** [elf/tests] Error 2


More information about the users mailing list