fedora-selinux February 2008 archive
Main Archive Page > Month Archives  > fedora-selinux archives
fedora-selinux: Re: [F8] (Re)Starting httpd reveals php pdf.so s

Re: [F8] (Re)Starting httpd reveals php pdf.so stack permission errors...

From: Daniel B. Thurman <dant_at_nospam>
Date: Mon Feb 18 2008 - 23:53:37 GMT
To: Daniel J Walsh <dwalsh@redhat.com>

On Mon, 2008-02-18 at 12:32 -0800, Daniel J Walsh wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Daniel B. Thurman wrote:
> > On Mon, 2008-02-18 at 06:31 -0800, Daniel J Walsh wrote:
> >
> >> execstack -c /usr/lib/php/modules/pdf.so
> >
> >
> > I tried it. No change.
> >
> >
> Ok you can add this rule via audit2allow
>
> # grep execstack /var/log/audit/audit.log | audit2allow -m myphp
> # semodule -i myphp.pp
>
> But you should report this as a bug
> against /usr/lib/php/modules/pdf.so
>
> Attach this link

Uh, I did the following steps:

  1. execstack -c /usr/lib/php/modules/pdf.so <nothing>
  2. grep execstack /var/log/audit/audit.log | grep audit2allow -m myphp grep: invalid max count
  3. semodule -i myphp.pp semodule: Could not read file 'myphp.pp': No such file or directory

Somehow, this is not what you wanted?

-- fedora-selinux-list mailing list fedora-selinux-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-selinux-list