[DSE-Dev] i386 PIE/allow_execmod in stretch emergency!
Russell Coker
russell at coker.com.au
Wed Mar 8 04:14:51 UTC 2017
There have been some recent binary NMUs for Stretch to support PIE on i386.
One very important one is gzip. PIE on i386 needs execmod access and given
the number of domains calling gzip and other programs that means allow_execmod
is almost mandatory for i386.
We need to have this happen by default. Which package should we modify to do
a "setsebool -P allow_execmod 1" on i386?
--
My Main Blog http://etbe.coker.com.au/
My Documents Blog http://doc.coker.com.au/
More information about the SELinux-devel
mailing list