From: sven.vermeulen@siphos.be (Sven Vermeulen) Date: Thu, 10 Mar 2011 14:37:05 +0100 Subject: [refpolicy] [PATCH 06/15] Add firefox file contexts for binary installations In-Reply-To: <1299758523.4243.17.camel@tesla.lan> References: <20110309211238.GA4704@siphos.be> <1299710378.2974.26.camel@tesla.lan> <4D788B5E.9060308@gmail.com> <1299758523.4243.17.camel@tesla.lan> Message-ID: <20110310133705.GB12988@siphos.be> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On Thu, Mar 10, 2011 at 01:02:03PM +0100, Guido Trentalancia wrote: > Plain F14 policy has text relocations for libxul.so but does that > privately. Text relocations are bad if they can be avoided and usually > that is the case. Now we have at least two confirmed cases that this is > possible (me and you)... I believe that the textrel_shlib_t is needed if you use the 32-bit binary distribution as offered by Mozilla (for firefox), not if it is built from source. I'll build a firefox here and give feedback. In any case, you're correct in that textrel_shlib_t contexts should be considered in the libraries.fc one instead. But I'll first see if I can confirm if it is always necessary or only in particular situations. Wkr, Sven Vermeulen