search for: execmem

This is more a CentOS issue, I think (hope) than selinux. I've got some systems in permissive mode - good thing, or they'd be dead. they keep spewing execmem errors with java, among other things. This *seems* like something that should be covered. I looked at the policy (selinux-policy-targeted, and it's 2.4.6. Googling around for the error, trying to find what's hopefully a boolean, or a role/etc solution, I saw an FC package with a 3.something...

...E files: >cat /proc/sys/fs/binfmt_misc/DOSWin >enabled >interpreter /usr/bin/wine/wine-pthread >flags: >offset 0 >magic 4d5a Then I *cannot* run the casio program directly - I get an AVC error >Jul 30 19:01:42 surfer kernel: audit(1154304102.342:1745): avc: denied { execmem } for pid=13475 comm="casio" scontext=user_u:system_r:unconfined_t:s0 tcontext=user_u:system_r:unconfined_t:s0 tclass=process * If I set the security contect for the binary "casio" the same as "wine" then it runs: >[wowbaggr@surfer bin]$ ls -lZ casio >-rwxr...

...z2 fprintd.pp.bz2 ftp.pp.bz2 games.pp.bz2 gnome.pp.bz2 gnomeclock.pp.bz2 hal.pp.bz2 hddtemp.pp.bz2 passenger.pp.bz2 permissivedomains.pp.bz2 policykit.pp.bz2 puppet.pp.bz2 ptchown.pp.bz2 psad.pp.bz2 howl.pp.bz2 inn.pp.bz2 ipsec.pp.bz2 irc.pp.bz2 iscsi.pp.bz2 icecast.pp.bz2 jabber.pp.bz2 java.pp.bz2 execmem.pp.bz2 kdump.pp.bz2 kdumpgui.pp.bz2 ksmtuned.pp.bz2 kerberos.pp.bz2 ktalk.pp.bz2 ldap.pp.bz2 likewise.pp.bz2 lockdev.pp.bz2 lpd.pp.bz2 lircd.pp.bz2 mailman.pp.bz2 mono.pp.bz2 mozilla.pp.bz2 ntop.pp.bz2 nslcd.pp.bz2 nsplugin.pp.bz2 modemmanager.pp.bz2 mpd.pp.bz2 mplayer.pp.bz2 gpg.pp.bz2 mrtg.pp.bz2...