rpms/selinux-policy
5
0
Fork 0
Code Issues Pull Requests Releases Activity

Change the selinuxuser_execstack boolean value to true

Browse Source 
With the d5bb233ea2 ("Do not change selinuxuser_execmod and
selinuxuser_execstack") commit, the default "off" value of
selinuxuser_execmod and selinuxuser_execstack booleans stopped
being switched to "on" by the selinux-policy package build configuration
to keep their default "off" value.

It turned out subsequently the execstack permission is required by some
tools like virt-v2v or when packages like glibc or binutils are rebuilt.
It is also needed by many 3rd party software packages.
As a result, the value of selinuxuser_execstack needs to be changed
to "on" again.

Resolves: rhbz#2064274
This commit is contained in:
Zdenek Pytela 2022-03-24 15:22:33 +01:00
parent f60c51e134
commit d0c8cc2186
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
booleans-targeted.conf
View File

@ -12,6 +12,7 @@ pppd_can_insmod = false
privoxy_connect_any = true
selinuxuser_direct_dri_enabled = true
selinuxuser_execmem = true
selinuxuser_execstack = true
selinuxuser_rw_noexattrfile=true
selinuxuser_ping = true
squid_connect_any = true