Re: SELinux



On Monday 13 December 2010 18:48:35 Patrick Dupre wrote:
I tried to use restcorecon -v -R /usr/lib/libgiac.so.0.0.0 and
restorecon -v -R /usr/bin/xcas

but I have not been successful.

Some ideas ?

text relocation.. That's a common issue. You need to label the libraries with
"textrel_shlib_t" and you do that with the chcon command BUT... in order to do
it the proper way (so that it survives any future realabel of the system) try
this:

semanage fcontext -a -t textrel_shlib_t '/usr/lib/libgiac.so.0.0.0'
restorecon -v /usr/lib/libgiac.so.0.0.0

With semanage you're telling SELinux THAT library should always be labelled as
"textrel_shlib_t". If you don't do this you'll get the default "lib_t" which
I supposed is the current label (if you do "ls -lZ libiac*" which happens to
be the default label for the parent directory (/usr/lib).

That semanage line has the specific library. You could enter a regular
expression there but I don't know your details. If you get any other AVC with
the same message (text relocation..) for another library, run another semange
command changing the library name.

HTH,
Jorge
--
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines



Relevant Pages

  • Can Nasm generate RVA relocations for me (PE,COFF,WIN32)?
    ... obviously need to somehow get RVA relocations for some elements. ... I am working with NASM and GNU ld. ... figured out how to link with the provided import libraries I ... RELOCATION RECORDS FOR: ...
    (comp.lang.asm.x86)
  • Re: Determine location of LD_PRELOADed shared libraries/functions.
    ... >search for relocation sections, which eventually point to the plt function entries. ... LD_PRELOAD'ed lib is only in the memory, to which programs sections do not apply. ... >Libraries sections can't know to what address they will be mmapped to, ...
    (freebsd-hackers)
  • ld.so read-ahead proposal
    ... the thought occurred to me that reading entire libraries in (i.e. ... The .text segments will have hot spots and cold spots, ... library using readahead(), right up to .data and .bss. ... so the relocation process is probably CPU bound. ...
    (Ubuntu)
  • Re: Problem for a shared-library expert
    ... > libraries A or B. ... Then load the modified ... The next way is to "pre-snap" the links in the Program Linkage Table (PLT). ... then you have to re-write the PLT relocation. ...
    (comp.os.linux.development.apps)
  • Re: FPGA editor in Fedora 11 x86_64
    ... Libraries are sometimes coded incorrectly ... < and request this permission. ... < libkernel50.so to use relocation as a workaround, ... you can change the file context to textrel_shlib_t. ...
    (comp.arch.fpga)