[DSE-Dev] i386 PIE/allow_execmod in stretch emergency!

Russell Coker russell at coker.com.au
Wed Mar 8 04:14:51 UTC 2017


There have been some recent binary NMUs for Stretch to support PIE on i386.  
One very important one is gzip.  PIE on i386 needs execmod access and given 
the number of domains calling gzip and other programs that means allow_execmod 
is almost mandatory for i386.

We need to have this happen by default.  Which package should we modify to do 
a "setsebool -P allow_execmod 1" on i386?

-- 
My Main Blog         http://etbe.coker.com.au/
My Documents Blog    http://doc.coker.com.au/



More information about the SELinux-devel mailing list