d0c8cc2186
With the d5bb233ea2 ("Do not change selinuxuser_execmod and
selinuxuser_execstack") commit, the default "off" value of
selinuxuser_execmod and selinuxuser_execstack booleans stopped
being switched to "on" by the selinux-policy package build configuration
to keep their default "off" value.
It turned out subsequently the execstack permission is required by some
tools like virt-v2v or when packages like glibc or binutils are rebuilt.
It is also needed by many 3rd party software packages.
As a result, the value of selinuxuser_execstack needs to be changed
to "on" again.
Resolves: rhbz#2064274
25 lines
709 B
Plaintext
25 lines
709 B
Plaintext
gssd_read_tmp = true
|
|
httpd_builtin_scripting = true
|
|
httpd_enable_cgi = true
|
|
kerberos_enabled = true
|
|
mount_anyfile = true
|
|
nfs_export_all_ro = true
|
|
nfs_export_all_rw = true
|
|
nscd_use_shm = true
|
|
openvpn_enable_homedirs = true
|
|
postfix_local_write_mail_spool=true
|
|
pppd_can_insmod = false
|
|
privoxy_connect_any = true
|
|
selinuxuser_direct_dri_enabled = true
|
|
selinuxuser_execmem = true
|
|
selinuxuser_execstack = true
|
|
selinuxuser_rw_noexattrfile=true
|
|
selinuxuser_ping = true
|
|
squid_connect_any = true
|
|
telepathy_tcp_connect_generic_network_ports=true
|
|
unconfined_chrome_sandbox_transition=true
|
|
unconfined_mozilla_plugin_transition=true
|
|
xguest_exec_content = true
|
|
mozilla_plugin_can_network_connect = true
|
|
use_virtualbox = true
|