With the d5bb233ea2 ("Do not change selinuxuser_execmod and
selinuxuser_execstack") commit, the default "off" value of
selinuxuser_execmod and selinuxuser_execstack booleans stopped
being switched to "on" by the selinux-policy package build configuration
to keep their default "off" value.
It turned out subsequently the execstack permission is required by some
tools like virt-v2v or when packages like glibc or binutils are rebuilt.
It is also needed by many 3rd party software packages.
As a result, the value of selinuxuser_execstack needs to be changed
to "on" again.
Resolves: rhbz#2064274
The selinuxuser_execmod and selinuxuser_execstack booleans are off
by default in the selinux-policy repository, but custom build
configuration changed it to the "on" value.
Since this commit, the booleans will keep their default value.
Resolves: rhbz#2055822
Zdenek Pytela
Troy Dawson