Research
Skip Research Menus
Research MenuSecurity Enhanced Linux What's New Frequently Asked Questions Background Documents License Download Participating Mail List Archives Remaining Work Contributors Related Work Press Releases Information Assurance Research NIARL In-house Research Areas Mathematical Sciences Program Sabbaticals Computer & Information Sciences Research Technology Transfer Advanced Computing Advanced Mathematics Communications & Networking Information Processing Microelectronics Other Technologies Technology Fact Sheets Publications Related Links |
SELinux Mailing ListRe: libselinux rpm_execon should not fail in permissive mode.
From: Stephen Smalley <sds_at_epoch.ncsc.mil>
Date: Wed, 26 Jan 2005 08:32:28 -0500
I don't see how this fixes the rpm --root issue, as security_getenforce() cannot succeed either if /selinux is not mounted, as it attempts to read /selinux/enforce. What about the attached patch instead, which causes rpm_execcon() to simply call execve() if is_selinux_enabled() returns < 1? is_selinux_enabled() will return -1 if /proc isn't mounted, so this would cause it to fallback to a regular exec in the chroot'd environment. -- Stephen Smalley <sds@epoch.ncsc.mil> National Security AgencyReceived on Wed 26 Jan 2005 - 08:38:52 EST |
|
Date Posted: Jan 15, 2009 | Last Modified: Jan 15, 2009 | Last Reviewed: Jan 15, 2009 |