[DSE-Dev] Bug#1070039: how to fix this

Antonio Russo aerusso at aerusso.net
Sat Jan 11 14:01:23 GMT 2025


Hello,

On 1/11/25 02:45, Russell Coker wrote:
> Is there a way we could automatically change the [allow_execmem]
> boolean when a package like gdm or sddm is installed?

Wouldn't it be better to only allow some processes to have w&x memory,
rather than try to automatically flip the global boolean?  Or is it
just that really WAY too many programs on the Linux desktop that don't
even try to have w^x permissions?
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0x72DB026E04C1C768.asc
Type: application/pgp-keys
Size: 7680 bytes
Desc: OpenPGP public key
URL: <http://alioth-lists.debian.net/pipermail/selinux-devel/attachments/20250111/5c03459a/attachment.asc>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/selinux-devel/attachments/20250111/5c03459a/attachment.sig>


More information about the SELinux-devel mailing list