rpms/selinux-policy
6
0
Fork 0
Code Issues Pull Requests Releases Activity

Turn back on allow_execmem boolean

Browse Source
This commit is contained in:
Dan Walsh 2011-11-08 08:47:34 -05:00
parent 13382d02ea
commit e58227a2b3
2 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
booleans-targeted.conf
View File

@ -1,6 +1,7 @@
# Allow making anonymous memory executable, e.g.for runtime-code generation or executable stack. # Allow making anonymous memory executable, e.g.for runtime-code generation or executable stack.
# #
deny_execmem = false deny_execmem = false
allow_execmem = true
# Allow making a modified private filemapping executable (text relocation). # Allow making a modified private filemapping executable (text relocation).
# #

5
selinux-policy.spec
View File

@ -17,7 +17,7 @@
Summary: SELinux policy configuration Summary: SELinux policy configuration
Name: selinux-policy Name: selinux-policy
Version: 3.10.0 Version: 3.10.0
Release: 55%{?dist} Release: 55.1%{?dist}
License: GPLv2+ License: GPLv2+
Group: System Environment/Base Group: System Environment/Base
Source: serefpolicy-%{version}.tgz Source: serefpolicy-%{version}.tgz
@ -483,6 +483,9 @@ SELinux Reference policy mls base module.
%endif %endif
%changelog %changelog
* Tue Nov 8 2011 Dan Walsh <dwalsh@redhat.com> 3.10.0-55.1
- Turn back on allow_execmem boolean
* Mon Nov 7 2011 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-55 * Mon Nov 7 2011 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-55
- Add more MCS fixes to make sandbox working - Add more MCS fixes to make sandbox working
- Make faillog MLS trusted to make sudo_$1_t working - Make faillog MLS trusted to make sudo_$1_t working