From: dominick.grift@gmail.com (Dominick Grift)
Date: Wed, 18 Sep 2013 21:54:42 +0200
Subject: [refpolicy] Fwd: Debian unstable, SELinux and Iceweasel
In-Reply-To: <5239AEFF.6000902@ping.de>
References: <52384CD9.60604@ping.de> <5239AEFF.6000902@ping.de>
Message-ID: <1379534082.16771.19.camel@d30>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On Wed, 2013-09-18 at 15:47 +0200, Andreas Kuckartz wrote:
> Any suggestions from here?
> 

you can allow the execmem issue with audit2allow

debian has no active selinux maintainers. this is the problem.
the latest refpolicy needs to be packaged and distributed, and then also
maintained.

> Cheers,
> Andreas
> 
> -------- Original Message --------
> Date: Tue, 17 Sep 2013 14:36:41 +0200
> From: Andreas Kuckartz <a.kuckartz@ping.de>
> To: selinux-user at lists.alioth.debian.org
> 
> I am running a Debian unstable system with SELinux in permissive mode.
> 
> I have appended the result of
> $ cat /var/log/audit/audit.log | audit2allow -l -R
> 
> There are quite a few missing type enforcement (TE) allow rules.
> 
> In addition to that Iceweasel requires allow_execstack and allow_execmem
> - which is not good. I have researched that and found these two old open
> Firefox issues:
> 
> SELinux is preventing JIT from changing memory segment access
> https://bugzilla.mozilla.org/show_bug.cgi?id=506693
> 
> Firefox 3.6.4 will not start on Fedora 12+ due to SELinux permission error
> https://bugzilla.mozilla.org/show_bug.cgi?id=574119
> 
> What do you suggest on how to proceed?
> 
> Cheers,
> Andreas
> 
> 
> 
> _______________________________________________
> refpolicy mailing list
> refpolicy at oss.tresys.com
> http://oss.tresys.com/mailman/listinfo/refpolicy