From: dominick.grift@gmail.com (Dominick Grift)
Date: Wed, 18 Sep 2013 22:10:27 +0200
Subject: [refpolicy] Fwd: Debian unstable, SELinux and Iceweasel
In-Reply-To: <1379534082.16771.19.camel@d30>
References: <52384CD9.60604@ping.de> <5239AEFF.6000902@ping.de>
	<1379534082.16771.19.camel@d30>
Message-ID: <1379535027.16771.21.camel@d30>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On Wed, 2013-09-18 at 21:54 +0200, Dominick Grift wrote:
> On Wed, 2013-09-18 at 15:47 +0200, Andreas Kuckartz wrote:
> > Any suggestions from here?
> > 
> 
> you can allow the execmem issue with audit2allow

err .... there actually is probably a boolean that you can toggle to
allow it:

allow_execmem
allow_execstack

if you pipe the avc denial into the input stream of audit2why it should
suggest booleans to toggle if they are available

> 
> debian has no active selinux maintainers. this is the problem.
> the latest refpolicy needs to be packaged and distributed, and then also
> maintained.